CVE-2025-9186
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk12th percentile - higher than 12% of all known CVEs
Summary
Firefox Focus for Android has a spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142.
Risk Assessment
A user could be tricked into believing they are on a trusted site, potentially leading to phishing of credentials or other sensitive information.
Recommendation
Update Firefox Focus for Android to version 142 or later to get the fix.
Other vulnerabilities in Firefox Focus
See all- CVE-2026-84135Critical
Other issue in Firefox Focus for Android. It was fixed in Firefox 155.
- CVE-2023-25743High
A lack of in-app notification for entering fullscreen mode could allow a malicious website to spoof browser chrome. This bug only affects Firefox Focus; other Firefox versions are unaffected. Affects Firefox < 110 and Firefox ESR < 102.8.
Original NVD description (English source)
Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS