Navigation Security Flaw in Mozilla Thunderbird and Firefox

CVE-2025-8038

What is CVE-2025-8038?

A navigation security vulnerability affects both Mozilla Thunderbird and Firefox, allowing for improper validation of navigation paths in some situations. This flaw can lead to the potential exploitation of sensitive information or unintended access to restricted content by ignoring accounting for the correct paths when rendering in frames. Users are encouraged to update their software to the latest versions listed in the affected products to mitigate this security risk.

References