CVE-2025-9186: Mozilla Firefox

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

Affected products

• Mozilla Firefox: before 142.0 (fixed in 142.0)

Published 2025-08-19. Last modified 2026-09-30.