Resource Enumeration Flaw in Firefox WebCompat Extension

CVE-2025-6425

What is CVE-2025-6425?

A security vulnerability has been identified in the WebCompat extension for Firefox that allows attackers to enumerate resources. This flaw could enable the retrieval of a persistent UUID that uniquely identifies the browser instance, which persists across both normal and private browsing modes, although it is not retained across different user profiles. This issue affects specific versions of Firefox, including those prior to 140, and specific releases of Firefox ESR (< 115.25 and < 128.12), potentially exposing users to privacy risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References