CVE-2025-11718: 
NixOS vulnerability analysis and mitigation

CVE-2025-11718 is a security vulnerability affecting Firefox versions prior to 144 on Android devices. The vulnerability was discovered by security researchers Hafiizh & kang ali and was disclosed on October 14, 2025. The issue allows a malicious webpage to create a fake address bar to deceive users when the original address bar is hidden due to scrolling, specifically triggered by a visibilitychange event (Mozilla Advisory, NVD).

The vulnerability exploits the Android-specific behavior of Firefox's address bar hiding mechanism during page scrolling. When a visibilitychange event occurs, malicious pages can create and display a counterfeit address bar, potentially misleading users about their current website location. Mozilla has classified this vulnerability as having a moderate impact (Mozilla Advisory).

The primary impact of this vulnerability is the potential for address bar spoofing, which could lead to effective phishing attacks. Malicious actors could trick users into believing they are on a legitimate website when they are actually on a fraudulent one, potentially leading to credential theft or other forms of social engineering attacks (Mozilla Advisory).

Mozilla has addressed this vulnerability in Firefox 144. Users are strongly advised to update their Android Firefox installations to version 144 or later to protect against this security issue (Mozilla Advisory).