CVE-2025-8041 — User Interface (UI) Misrepresentation of Critical Information in Mozilla Firefox

CWE-451 — User Interface (UI) Misrepresentation of Critical Information6 documents6 sources

Severity

5.3MEDIUMNVD

EPSS

0.0%

top 89.42%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Mozilla Firefox

Timeline

PublishedAug 19

Description

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages1 packages

▶NVDmozilla/firefox< 141.0

🔴Vulnerability Details

CVEList

Incorrect URL truncation in Firefox for Android↗2025-08-19

▶

GHSA

GHSA-3rc5-4jr8-p23m: In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin↗2025-08-19

▶

📋Vendor Advisories

Debian

CVE-2025-8041: firefox - In the address bar, Firefox for Android truncated the display of URLs from the e...↗2025

▶

Mozilla

Mozilla Foundation Security Advisory 2025-56: CVE-2025-8041↗

▶

💬Community

Bugzilla

[Android] URL Bar Spoof (long blob: urls can truncate real domain, bypass fix for CVE-2025-8041)↗2025-06-02

▶