Mitigation Bypass in Firefox Security Component by Mozilla
CVE-2025-13018

8.1HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
11 November 2025

What is CVE-2025-13018?

A mitigation bypass vulnerability has been identified in the security component of Firefox, affecting versions below 145 and the Extended Support Release (ESR) below 140.5. This flaw could potentially allow attackers to exploit weaknesses in the browser's security measures, rendering users more susceptible to various web-based threats. It is crucial for users to be aware of this vulnerability and keep their browsers up to date to maintain optimal security.

Affected Version(s)

Firefox < 145

Firefox ESR < 140.5

Thunderbird < 145

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1984940
https://www.mozilla.org/security/advisories/mfsa2025-87/
https://www.mozilla.org/security/advisories/mfsa2025-88/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Daniel Veditz
JSON
.
CVE-2025-13018 : Mitigation Bypass in Firefox Security Component by Mozilla