cbcvebase.
CVE-2025-11717
published 2025-10-14

CVE-2025-11717: When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one…

PriorityP346critical9.1CVSS 3.1
AVNACLPRNUINSUCHIHAN
EPSS
0.25%
16.2th percentile
When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

Affected

3 ranges
VendorProductVersion rangeFixed in
debianfirefox
mozillafirefox< 144.0144.0
mozillafirefox

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
osv9.1CRITICAL
vendor_debian9.1LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.