← Database

CVE-2025-1941

CRITICAL CVSS: 9.1 Published: 2025-03-04 Modified: 2026-06-17

Description

Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245). This vulnerability was fixed in Firefox 136.

Affected Platforms

Mozilla Firefox

Weakness Type

CWE-284

References