C
ookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs This vulnerability affects Firefox for iOS < 143.1.
References
| Link | Resource |
|---|---|
| https://bugzilla.mozilla.org/show_bug.cgi?id=1684624 | Issue Tracking Permissions Required |
| https://www.mozilla.org/security/advisories/mfsa2025-79/ | Vendor Advisory |
Configurations
History
03 Oct 2025, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://bugzilla.mozilla.org/show_bug.cgi?id=1684624 - Issue Tracking, Permissions Required | |
| References | () https://www.mozilla.org/security/advisories/mfsa2025-79/ - Vendor Advisory | |
| CPE | cpe:2.3:a:mozilla:firefox:*:*:*:*:*:iphone_os:*:* | |
| First Time |
Mozilla firefox
Mozilla |
02 Oct 2025, 19:12
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-09-30 13:15
Updated : 2025-10-03 20:16
NVD link : CVE-2025-10859
Mitre link : CVE-2025-10859
CVE.ORG link : CVE-2025-10859
JSON object : View
CWE
CWE-359
Exposure of Private Personal Information to an Unauthorized Actor