EXPOSURES › CVE-2025-11717

CVE-2025-11717

CRITICAL

DETAIL

SourceNVD · cve Published2025-10-14 CVSS9.1 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2025-11717 ↗

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

Google · vendor mozilla · vendor android · product firefox · product

DESCRIPTION

When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was fixed in Firefox 144.

AFFECTED FEDRAMP PRODUCTS · 2

PRODUCT	PROVIDER	STATUS	MATCH
Google Services (Google Cloud Platform Products and underlying Infrastructure) Google	Google	Authorized	vendor-exact · 0.90
Google Workspace Google	Google	Authorized	vendor-exact · 0.90