Custom URL Protocol Handler Vulnerability in Firefox Browser by Mozilla

CVE-2025-1935

What is CVE-2025-1935?

A security issue exists that may enable a malicious web page to convince a user to set that page as the default handler for a custom URL protocol. This could lead to unintended actions being taken when a user attempts to use that protocol, potentially compromising user privacy and security. Affected versions include Firefox versions prior to 136 and Firefox ESR versions before 128.8.

References