Beveiligingsadvies

CVE-2025-4085

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-04-29 13:13:39
Laatst bijgewerkt 2026-04-13 14:28:43
Toegewezen door mozilla
CVSS-score 7.1
Status PUBLISHED

Beschrijving

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138.