CVE-2025-6432

Publication date

2025-06-24 12:28:03

Family

mozilla

State

PUBLISHED

Description

When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability affects Firefox < 140 and Thunderbird < 140.