Information Leak and Privilege Escalation in Firefox and Thunderbird

CVE-2025-4085

What is CVE-2025-4085?

A security flaw has been identified in Firefox and Thunderbird where an attacker controlling a content process may exploit a privileged UITour actor. This exploitation could result in the unauthorized disclosure of sensitive information or lead to privilege escalation, compromising the overall security of affected systems.

References