Cross-Origin Resource Information Leak in Firefox Browser

CVE-2025-5266

What is CVE-2025-5266?

A vulnerability in the Firefox browser and its Extended Support Release allows script elements loading cross-origin resources to generate load and error events, potentially exposing sensitive information. This issue can be exploited through XS-Leaks attacks, where an attacker can infer the existence or status of certain resources through observable side effects. It is critical for users to update to the latest versions of Firefox to mitigate these risks and enhance their security.

References