CVE-2025-10859

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10859", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2025-09-22T18:14:38.909Z", "datePublished": "2025-09-30T12:49:07.059Z", "dateUpdated": "2026-04-13T14:31:38.944Z"}, "containers": {"cna": {"affected": [{"product": "Firefox for iOS", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "143.1", "lessThanOrEqual": "*", "versionType": "rpm"}]}], "descriptions": [{"lang": "en", "value": "Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1."}]}], "title": "Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1684624"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-79/"}], "credits": [{"lang": "en", "value": "Muneaki Nishimura"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:31:38.944Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-359", "lang": "en", "description": "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-09-30T13:38:47.283789Z", "id": "CVE-2025-10859", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-30T13:38:50.570Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-10859", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-09-30T13:38:47.283789Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-359", "description": "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-09-30T13:38:09.641Z"}}], "cna": {"title": "Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs", "credits": [{"lang": "en", "value": "Muneaki Nishimura"}], "affected": [{"vendor": "Mozilla", "product": "Firefox for iOS", "versions": [{"status": "unaffected", "version": "143.1", "versionType": "rpm", "lessThanOrEqual": "*"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1684624"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-79/"}], "descriptions": [{"lang": "en", "value": "Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1.", "supportingMedia": [{"type": "text/html", "value": "Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1.", "base64": false}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:31:38.944Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10859", "state": "PUBLISHED", "dateUpdated": "2026-04-13T14:31:38.944Z", "dateReserved": "2025-09-22T18:14:38.909Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2025-09-30T12:49:07.059Z", "assignerShortName": "mozilla"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Firefox for iOS", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "*", "status": "unaffected", "version": "143.1", "versionType": "rpm"}]}], "source": "security@mozilla.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:*", "matchCriteriaId": "A725DDC6-F0E5-4466-837A-CDD25A08F102", "versionEndExcluding": "143.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1."}, {"lang": "es", "value": "El almacenamiento de cookies para documentos temporales no HTML se estaba compartiendo incorrectamente con contenido de navegaci\u00f3n normal, permitiendo que informaci\u00f3n de pesta\u00f1as privadas escapara del modo Inc\u00f3gnito incluso despu\u00e9s de que el usuario cerrara todas las pesta\u00f1as. Esta vulnerabilidad afecta a Firefox para iOS menor que 143.1."}], "id": "CVE-2025-10859", "lastModified": "2026-10-05T15:10:00.590", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 4.0, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10859", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-09-30T13:38:47.283789Z", "version": "2.0.3"}}]}, "published": "2025-09-30T13:15:48.550", "references": [{"source": "security@mozilla.org", "tags": ["Issue Tracking", "Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1684624"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2025-79/"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-359"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T21:43:48.079489+00:00", "value": {"mitigation_remediation": ["Upgrade Mozilla Firefox for iOS to version\u202f143.1 or later.", "Always close private browsing sessions before switching to normal browsing contexts to avoid residual cookie exposure.", "Clear all cookies or use a cleanup tool after closing incognito tabs to remove any remaining private\u2011session data."], "summary": {"action": "Patch Now", "impact": "Information Disclosure via Incognito Cookie Leakage"}, "threat_synthesis": {"affected_systems": "Mozilla Firefox for iOS is affected; any installation earlier than version\u202f143.1 contains the bug.", "description_and_impact": "Cookies that belong to temporary non\u2011HTML documents created in private tabs were being stored in the same cookie jar that normal browsing uses. As a result, data entered or displayed in those private tabs, such as session tokens or user preferences, could be retrieved after the private tabs were closed. The flaw is a classic sensitive data exposure, identified as CWE\u2011359, and leads to confidentiality loss of any information that is stored in a cookie during a private session.", "risk_and_exploitability": "The CVSS score of 4 indicates low severity, and the EPSS score of less than 1\u202f% suggests exploitation is currently unlikely. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector, inferred from the description, involves an attacker delivering malicious content in a private tab that writes a cookie; when the private tab is closed, that cookie is then visible to the user in a normal browsing session. This risk is limited to users who expose private data to such content and close their private tabs, and no active exploitation has been documented."}}}}, "created": "2025-10-02T08:46:22.942376+00:00", "updated": "2026-04-20T21:45:18.976865+00:00", "vendors": ["apple", "apple$PRODUCT$ios", "mozilla", "mozilla$PRODUCT$firefox_for_ios"]}