CVE-2025-9183: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

Affected products

• Mozilla Firefox: before 140.2.0 (fixed in 140.2.0); before 142.0 (fixed in 142.0)

Published 2025-08-19. Last modified 2026-09-30.