XSLT Document Loading Vulnerability in Firefox and Thunderbird

CVE-2025-8032

What is CVE-2025-8032?

This vulnerability in Firefox and Thunderbird arises from improper propagation of the source document during XSLT document loading. As a result, the Content Security Policy (CSP) is bypassed, potentially allowing malicious scripts to execute undetected. Affected versions of Firefox and Thunderbird may expose users to various cybersecurity risks, making it crucial for users to update their applications promptly.

References