PatchGap
Firefox · Core

CVE-2025-1941

Logic Error in Core
Medium CVSS 9.1 firefox Logic Error

Overview

Medium
Severity
9.1
CVSS
No
Exploited ITW
Embargoed
Fix Status
Impactmoderate
DescriptionUnder certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245).
ComponentCore
Bug ClassLogic Error
Tracker1944665
CWECWE-284
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA KEVNot listed
CreditedJurrie Overgoor
Disclosed2025-03-04

Fix not yet public

No public source fix for this bug has been identified on the main branch yet — it is embargoed or not yet disclosed. Root-cause analysis is withheld until the fix commit is available.
On This Page