Skip to content
OpenAdvisories
High WID-SEC-2025-0901 13 CVEs

Mozilla Firefox, Firefox ESR, Thunderbird and Thunderbird ESR: Mehrere Schwachstellen

Published Apr 29, 2025 · Updated Jul 29, 2025 · Revision 15 · de-DE

Vendor: amazon Vendor: Debian Vendor: Mozilla Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Product: Enterprise Linux Product: Firefox Product: Firefox ESR Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: Rocky Linux Product: Thunderbird Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellenin Mozilla Firefox, Firefox ESR, Thunderbird und Thunderbird ESR ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand herbeizuführen, vertrauliche Informationen preiszugeben, Daten zu manipulieren oder andere nicht spezifizierte Angriffe durchzuführen.

Product

Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Thunderbird ist ein Open Source E-Mail Client.

Vulnerabilities 13

  • Critical 9.1
    CVE-2025-4083

    Process isolation bypass using "javascript:" URI links in cross-origin frames

    A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerabil…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • High 8.8
    CVE-2025-2817

    Privilege escalation in Thunderbird Updater

    Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls,…

    Mozilla Firefox Thunderbird firefox Browsers Wolfi
  • High 8.1
    CVE-2025-4091

    Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10

    Memory safety bugs present in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • High 8.1
    CVE-2025-4093

    Memory safety bug fixed in Firefox ESR 128.10 and Thunderbird 128.10

    Memory safety bug present in Firefox ESR 128.9, and Thunderbird 128.9. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox ESR 128.1…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • High 7.1
    CVE-2025-4085

    Potential information leakage and privilege escalation in UITour actor

    An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-4086

    Specially crafted filename could be used to obscure download type

    A specially crafted filename containing a large number of encoded newline characters could obscure the file's extension when displayed in the download dialog. *This bug only affects Thunderbird for Android. Other versions of Thunderbird are unaffected.*. This…

    Mozilla Firefox Thunderbird firefox Browsers Wolfi
  • Medium 6.5
    CVE-2025-4088

    Cross-site request forgery via storage access API redirects

    A security vulnerability in Thunderbird allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-4092

    Memory safety bugs fixed in Firefox 138 and Thunderbird 138

    Memory safety bugs present in Firefox 137 and Thunderbird 137. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 5.9
    CVE-2025-4082

    WebGL shader attribute memory corruption in Thunderbird for macOS

    Modification of specific WebGL shader attributes could trigger an out-of-bounds read, which, when chained with other vulnerabilities, could be used to escalate privileges. *This bug only affects Thunderbird for macOS. Other versions of Thunderbird are unaffec…

    Mozilla Firefox Thunderbird firefox Browsers Wolfi
  • Medium 5.7
    CVE-2025-4084

    Potential local code execution in "copy as cURL" command

    Due to insufficient escaping of the special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other v…

    Mozilla Firefox Thunderbird firefox Browsers Wolfi
  • Medium 5.3
    CVE-2025-4090

    Leaked library paths in Thunderbird for Android

    A vulnerability existed in Thunderbird for Android where potentially sensitive library locations were logged via Logcat. This vulnerability was fixed in Firefox 138 and Thunderbird 138.

    Mozilla Firefox Thunderbird firefox Browsers Wolfi
  • Medium 5.1
    CVE-2025-4089

    Potential local code execution in "copy as cURL" command

    Due to insufficient escaping of special characters in the "copy as cURL" feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 138 and Thunder…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 4.8
    CVE-2025-4087

    Unsafe attribute access during XPath parsing

    A vulnerability was identified in Thunderbird where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. This vulnerability was fixe…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

Revision history

  1. #15

    Neue Updates von Rocky Enterprise Software Foundation aufgenommen

  2. #14

    Neue Updates von Oracle Linux aufgenommen

  3. #13

    Neue Updates von Oracle Linux aufgenommen

  4. #12

    Neue Updates von Amazon aufgenommen

  5. #11

    Neue Updates von Oracle Linux aufgenommen

  6. #10

    Neue Updates von Debian aufgenommen

  7. #9

    Neue Updates von Red Hat aufgenommen

  8. #8

    Neue Updates von Red Hat aufgenommen

  9. #7

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  10. #6

    Neue Updates von SUSE aufgenommen

  11. #5

    Neue Updates von Oracle Linux aufgenommen

  12. #4

    Neue Updates von Oracle Linux aufgenommen

  13. #3

    Neue Updates von openSUSE, SUSE und Red Hat aufgenommen

  14. #2

    Neue Updates von Debian und openSUSE aufgenommen

  15. #1

    Initiale Fassung

References