CVE-2025-6435

Publication date

2025-06-24 12:28:04

Family

mozilla

State

PUBLISHED

Description

If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulnerability affects Firefox < 140 and Thunderbird < 140.