CVE-2025-11717

published 2025-10-14

CVE-2025-11717: When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one…

critical 9.1 CVSS 3.1

AV N AC L PR N UI N S U C H I H A N

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	firefox	—	—
mozilla	firefox	< 144.0	144.0
mozilla	firefox	—	—

CVSS provenance

nvd v3.1 9.1 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

osv 9.1 CRITICAL

CWE-200