CVE-2025-1941
Critical · CVSS 9.1- CVSS
- 9.1
- nvd
- EPSS
- 0.37%
- 28th pct
- KEV
- No
- Class
- other
- CWE-284
Description
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed (distinct from CVE-2025-0245). This vulnerability was fixed in Firefox 136.
References
Status: profiled · ingested 2026-10-05T18:00:53.000Z