CVE-2025-11717CWE-200information-disclosure

CVE-2025-11717

Critical · published October 14, 2025

CVSS v3.1
9.1
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

🚨 A black screen is all that stands between your password and curious eyes when switching apps in Firefox! 🔥 Think of it like a restaurant where the last dish served is just a dark plate instead of your delicious entrée when your friends are trying to peek at your order. It’s not just messy, it’s a recipe for disaster! In a world where privacy is paramount, this bug could lead to sensitive information exposure, leaving your credentials open for prying eyes. An unintended glimpse at a password screen could potentially compromise your online security. If someone's watching, they might just catch a glimpse of what should remain private!

Put simply

Think of it like a restaurant where the last dish served is just a dark plate instead of your delicious entrée when your friends are trying to peek at your order. It’s not just messy, it’s a recipe for disaster! This vulnerability allows the Firefox app to improperly display a black screen instead of the last active password screen while switching between applications, potentially exposing sensitive login details inadvertently.

What to do

In a world where privacy is paramount, this bug could lead to sensitive information exposure, leaving your credentials open for prying eyes. An unintended glimpse at a password screen could potentially compromise your online security. If someone's watching, they might just catch a glimpse of what should remain private! To keep your browsing secure, update Firefox to version 144 or later immediately. This crucial fix ensures that the password editing screen no longer displays as a black screen, safeguarding your sensitive information. Don't skip this step! You can do this! Get that update installed and keep your data safe. 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00267 · 17.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-14T17:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox< 144.0144.0
References (2)
EPSS history
Timeline
  • 14 OCT 12:27Z
    The password edit screen was not hidden in Android card view
    cvelistv5