Security Advisory

CVE-2025-14331

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-09 13:38:07
Last updated 2026-04-13 14:25:43
Assigner mozilla
State PUBLISHED

Description

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.