CVE-2025-14331

Description

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

References

https://www.mozilla.org/security/advisories/mfsa2025-96/

https://www.mozilla.org/security/advisories/mfsa2025-95/

https://www.mozilla.org/security/advisories/mfsa2025-94/

https://www.mozilla.org/security/advisories/mfsa2025-93/

https://www.mozilla.org/security/advisories/mfsa2025-92/

https://bugzilla.mozilla.org/show_bug.cgi?id=2000218

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS