CVE-2025-10535CWE-200information-disclosure

CVE-2025-10535

High · published September 16, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
22.8
In the wild
Unconfirmed
What it is

Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00312 · 22.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-09-16T17:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox< 143.0143.0
References (2)
https://bugzilla.mozilla.org/show_bug.cgi?id=1979918 · [email protected]https://www.mozilla.org/security/advisories/mfsa2025-73/ · [email protected]
EPSS history
Timeline
  • 16 SEP 12:26Z
    Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
    cvelistv5