CVE-2025-14331

Publication date

2025-12-09 13:38:07

Family

mozilla

State

PUBLISHED

Description

Same-origin policy bypass in the Request Handling component. This vulnerability affects Firefox < 146, Firefox ESR < 115.31, Firefox ESR < 140.6, Thunderbird < 146, and Thunderbird < 140.6.