CVE-2025-1013

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 135 Firefox ESR versions prior to 128.7 Thunderbird versions prior to 128.7 Thunderbird versions prior to 135

Description A race condition could have led to private browsing tabs being opened in normal browsing windows, potentially resulting in a privacy leak.

Recommendations For Firefox versions prior to 135, update to version 135 or later to resolve the issue. For Firefox ESR versions prior to 128.7, update to version 128.7 or later to resolve the issue. For Thunderbird versions prior to 128.7, update to version 128.7 or later to resolve the issue. For Thunderbird versions prior to 135, update to version 135 or later to resolve the issue.