Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2025-11718

Address bar could be spoofed on Android using visibilitychange

Description

When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mozilla Firefox

  • 144 to ≤ *unaffected

References