Cyber Posture

CVE-2025-8043

CriticalPublic PoC

Published: 22 July 2025

Published
22 July 2025
Modified
13 April 2026
KEV Added
Patch
CVSS Score 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0018 39.2th percentile
Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-8043 is a critical-severity User Interface (UI) Misrepresentation of Critical Information (CWE-451) vulnerability in Mozilla Firefox. Its CVSS base score is 9.8 (Critical).

Operationally, exploitation aligns with the MITRE ATT&CK technique Spearphishing Link (T1566.002); ranked at the 39.2th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.

The strongest mitigations our analysis identified are NIST 800-53 RA-5 (Vulnerability Monitoring and Scanning) and SI-2 (Flaw Remediation).

Threat & Defense at a Glance

What attackers do: exploitation maps to Spearphishing Link (T1566.002) and 1 other technique. What defenders deploy: see the NIST 800-53 controls recommended below.
Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

prevent

Directly remediates the Firefox Focus URL truncation flaw by requiring timely identification, reporting, and patching to version 141 or later.

detect

Scans organizational systems for vulnerable Firefox versions affected by CVE-2025-8043 to identify and prioritize remediation.

detect

Ensures monitoring of Mozilla security advisories like MFSA 2025-56 to receive alerts on the URL truncation vulnerability and deploy patches promptly.

MITRE ATT&CK Enterprise TechniquesAI

T1566.002 Spearphishing Link Initial Access
Adversaries may send spearphishing emails with a malicious link in an attempt to gain access to victim systems.
T1204.001 Malicious Link Execution
An adversary may rely upon a user clicking a malicious link in order to gain execution.
Why these techniques?

URL truncation flaw enables crafted malicious links to appear legitimate, directly facilitating spearphishing links and user execution via deceptive URLs.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

Focus incorrectly truncated URLs towards the beginning instead of around the origin. This vulnerability was fixed in Firefox 141.

Deeper analysisAI

CVE-2025-8043 is a vulnerability in Firefox where Focus incorrectly truncated URLs towards the beginning instead of around the origin, leading to potential user interface misrepresentation of critical information (CWE-451). This issue affects Firefox users prior to version 141 and carries a critical CVSS score of 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerability was published on 2025-07-22T21:15:51.263.

Remote attackers can exploit this vulnerability over the network with low attack complexity, requiring no privileges or user interaction. Exploitation enables high-impact consequences across confidentiality, integrity, and availability, such as misleading users about the true destination or nature of URLs through improper truncation.

Mozilla addressed this vulnerability with a fix in Firefox 141. Additional details are available in the Mozilla Foundation Security Advisory (MFSA 2025-56) at https://www.mozilla.org/security/advisories/mfsa2025-56/ and the corresponding Bugzilla entry at https://bugzilla.mozilla.org/show_bug.cgi?id=1970209.

Details

CWE(s)

Affected Products

mozilla
firefox
≤ 141.0
mozilla
thunderbird
≤ 141.0

CVEs Like This One

CVE-2025-1932Same product: Mozilla Firefox
CVE-2026-6762Same product: Mozilla Firefox
CVE-2026-3889Same product: Mozilla Thunderbird
CVE-2026-0877Same product: Mozilla Firefox
CVE-2026-6784Same product: Mozilla Firefox
CVE-2026-2634Same product: Mozilla Firefox
CVE-2025-8034Same product: Mozilla Firefox
CVE-2026-6774Same product: Mozilla Firefox
CVE-2025-1012Same product: Mozilla Firefox
CVE-2026-2802Same product: Mozilla Firefox

References