A AegiFlow
MEDIUMCVSS 6.5

CVE-2025-11718

CVE-2025-11718 updated by NVD

Modified
2026-10-10
Sources
nvd

Summary

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

References

Includes data from the National Vulnerability Database (NIST). NVD data is in the public domain; this page is not endorsed by NIST.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.