Beveiligingsadvies

CVE-2025-4083

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-29 13:13:36

Laatst bijgewerkt 2026-07-25 01:15:24

Toegewezen door mozilla

CVSS-score 9.1

Status PUBLISHED

Beschrijving

A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.

← Alle CVE's bekijken Bekijk op cve.org ↗