Mitigation Bypass in Firefox Security Component by Mozilla
CVE-2025-13018
8.1HIGH
Key Information:
- Vendor
Mozilla
- Vendor
- CVE Published:
- 11 November 2025
What is CVE-2025-13018?
A mitigation bypass vulnerability has been identified in the security component of Firefox, affecting versions below 145 and the Extended Support Release (ESR) below 140.5. This flaw could potentially allow attackers to exploit weaknesses in the browser's security measures, rendering users more susceptible to various web-based threats. It is crucial for users to be aware of this vulnerability and keep their browsers up to date to maintain optimal security.
Affected Version(s)
Firefox < 145
Firefox ESR < 140.5
Thunderbird < 145