CVE-2025-5267

Publication date

2025-05-27 12:29:25

Family

mozilla

State

PUBLISHED

Description

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139, Firefox ESR < 128.11, Thunderbird < 139, and Thunderbird < 128.11.