CVE-2025-10530

MEDIUM 6.5CVE-2025-10530 · Published 16/09/2025 · updated 18/10/2026

In short

CVE-2025-10530 is a MEDIUM (CVSS 6.5) vulnerability affecting firefox (mozilla), thunderbird (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 22.2% of all vulnerabilities.
Fix: update to 143.0 or later.

Package	Affected versions	Patched versions
firefox mozilla	`< 143.0`	`143.0`
thunderbird mozilla	`< 143.0`	`143.0`

Spoofing issue in the WebAuthn component in Firefox for Android. This vulnerability was fixed in Firefox 143 and Thunderbird 143.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

< 143.0

143.0

< 143.0

143.0

More vulnerabilities in firefox

See all →