What’s Vulnerable › Vulnerabilities

CVE-2025-8041: Incorrect URL truncation in Firefox for Android

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-08-19 · updated 2026-09-30
• Weakness: CWE-451

Description

In the address bar, Firefox for Android truncated the display of URLs from the end instead of prioritizing the origin. This vulnerability was fixed in Firefox 141.

Affected products

• Mozilla Firefox: before 141.0 — fixed in 141.0

How to fix

Upgrade to a fixed version: Mozilla Firefox 141.0. Check the vendor advisory for mitigations.

References

• https://bugzilla.mozilla.org/show_bug.cgi?id=1670725
• https://www.mozilla.org/security/advisories/mfsa2025-56/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1670725

Get alerted when CVE-2025-8041 or the next vulnerability affects your stack