Security Advisory

CVE-2025-8364

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-19 20:52:46
Last updated 2026-04-13 14:31:35
Assigner mozilla
State PUBLISHED

Description

A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 141.