CVE-2025-10859mediumCWE-359

CVE-2025-10859: medium-severity vulnerability in Mozilla Firefox for iOS

Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs

Published · Updated

Follow this CVE+ Monitor Firefox

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4epss 0.1%
Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143.1.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Mozilla · Firefox for iOS
Related CVEs — Mozilla Firefox for iOS

In the same product, most dangerous first.

CVE-2020-6830—CVE-2020-6830EPSS 0.9%CVE-2020-15661—CVE-2020-15661EPSS 0.9%CVE-2020-12404—CVE-2020-12404EPSS 0.8%CVE-2020-15662—CVE-2020-15662EPSS 0.7%CVE-2020-12414—CVE-2020-12414EPSS 0.7%CVE-2021-29958—CVE-2021-29958EPSS 0.7%