Address Bar Spoofing Vulnerability in Firefox by Mozilla

CVE-2025-11718

What is CVE-2025-11718?

A security vulnerability in Firefox allows a malicious webpage to exploit the visibilitychange event, creating a fake address bar when the actual address bar is hidden from view due to scrolling on Android devices. This deception can lead users to believe they are interacting with a legitimate URL, putting them at risk of phishing attacks and other malicious activities.

References