CVE-2025-9183 is a spoofing vulnerability affecting the Address Bar component in Mozilla Firefox. The flaw allows an attacker to manipulate the address bar display, potentially misleading users about the true destination of a URL. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2. The CVSS 3.1 vector indicates the attack requires no privileges, has low complexity, user interaction is required, and the impact is on integrity only. No known exploits have been reported. The vendor advisory confirms the fix and provides references to the relevant bug report.

The vulnerability impacts the integrity of the address bar display, enabling spoofing attacks that could mislead users about the website they are visiting. This could facilitate phishing or social engineering attacks by making malicious sites appear legitimate. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Mozilla has released official fixes for this vulnerability in Firefox 142 and Firefox ESR 140.2. Users and administrators should update to these versions or later to remediate the issue. Since the vulnerability is fixed in these releases, no additional mitigation steps are required beyond applying the official update.