CVE-2025-1941: Lock screen setting bypass in Firefox Focus for Android
Published Mar 4, 2025
·Updated
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245).
Affected Software
3 affected componentsFixes available
Mozilla Firefox<136
Mozilla Firefox<136
136
Mozilla Firefox<136.0
Event History
Mar 4, 2025
CVE Published
via Mozilla·12:00 AM
CVE Published
via MITRE·01:31 PM
Data Sourced
via MITRE·01:31 PM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2025-1941?
CVE-2025-1941 has been classified as a moderate severity vulnerability.
2
How do I fix CVE-2025-1941?
To mitigate CVE-2025-1941, you should update Mozilla Firefox to the latest version beyond 136.
3
What systems are affected by CVE-2025-1941?
CVE-2025-1941 affects Mozilla Firefox versions up to and including 136.
4
What does CVE-2025-1941 exploit?
CVE-2025-1941 exploits a bypass of the user opt-in setting for authentication requirements in Focus.
5
Who is responsible for CVE-2025-1941?
CVE-2025-1941 has been identified and documented by Mozilla's security team.