PT-2025-30487
CVE-2025-8038
·
Published
2025-07-22
·
Updated
2026-09-30
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 141
Thunderbird versions prior to 140.1
Firefox versions prior to 141
Firefox ESR versions prior to 140.1
Description
Thunderbird and Firefox incorrectly handled path validation during frame navigations. This issue could potentially allow for malicious actions due to improper navigation checks within a frame.
Recommendations
Update Thunderbird to version 141 or later.
Update Thunderbird to version 140.1 or later.
Update Firefox to version 141 or later.
Update Firefox ESR to version 140.1 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾