CVE-2025-10535
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
7.5 High
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- None
Exploit likelihood
0.31%Up 0.3 points since Sep 17, 2025
What each source reports
CVE List Score used
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.
- Record
CVE-2025-10535- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
EUVDEUVD-2025-29553
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.
- Record
EUVD-2025-29553- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-gwf4-vcvc-4rjv
This vulnerability affects Firefox < 143.
This vulnerability affects Firefox < 143.
- Record
GHSA-gwf4-vcvc-4rjv- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
NVD
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability was fixed in Firefox 143.
- Record
CVE-2025-10535- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-10535
Information disclosure, mitigation bypass in the Privacy component in Firefox for Android. This vulnerability affects Firefox < 143.
- Record
UBUNTU-CVE-2025-10535- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15565-1No score
MozillaFirefox-143.0-1.1 on GA media
These are all security issues fixed in the MozillaFirefox-143.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15565-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2026:11373-1No score
firefox-esr-153.0-1.1 on GA media
These are all security issues fixed in the firefox-esr-153.0-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2026:11373-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxopenSUSE:Tumbleweed From an advisory covering 11 CVEs | before 143.0-1.1 | 143.0-1.1 |
firefox-esropenSUSE:Tumbleweed From an advisory covering 228 CVEs | before 153.0-1.1 | 153.0-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected | ||
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-10535 is a high vulnerability (CVSS 7.5) in Mozilla Firefox, published September 16, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.31%, the 24th percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=1979918
mozilla.org/security/advisories/mfsa2025-73
nvd.nist.gov/vuln/detail/CVE-2025-10535
github.com/advisories/GHSA-gwf4-vcvc-4rjv
ubuntu.com/security/CVE-2025-10535
cve.org/CVERecord?id=CVE-2025-10535
Show 194 moreShow less
suse.com/security/cve/CVE-2025-10527
This page doesn't list everything
Left out here: 42 references. The JSON record has them.