Spoofing Vulnerability in Firefox by Mozilla
CVE-2025-14327
7.5HIGH
What is CVE-2025-14327?
A spoofing vulnerability has been identified within the Downloads Panel component of Firefox, affecting all versions prior to 146. This flaw can lead to unauthorized information being displayed to users, potentially compromising their safety and data integrity. Users are advised to update to the latest version to mitigate the risks associated with this vulnerability.
Affected Version(s)
Firefox < 146
Thunderbird < 146
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Caro Kann