CVE-2025-8364 Information

Description

A crafted URL using a blob: URI could have hidden the true origin of the page resulting in a potential spoofing attack. Note: This issue only affected Android operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 141.

Reference

https://bugzilla.mozilla.org/show_bug.cgi?id=1909609 https://bugzilla.mozilla.org/show_bug.cgi?id=1969937 https://www.mozilla.org/security/advisories/mfsa2025-56/

CNNVD-202508-2233 (Published: 2025-08-19)

Share on: