Security Advisory

CVE-2025-9180

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-08-19 20:33:54

Last updated 2026-04-13 14:25:49

Assigner mozilla

State PUBLISHED

Description

Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

← Browse all CVEs View on cve.org ↗