Same-Origin Policy Bypass in Firefox and Thunderbird by Mozilla

CVE-2025-9180

What is CVE-2025-9180?

A vulnerability has been identified in the Graphics: Canvas2D component of the Mozilla products, allowing an attacker to bypass the same-origin policy. This could potentially lead to unauthorized access to sensitive data from different origins, compromising the security model intended to protect user data. The affected versions of Firefox and Thunderbird include several prior releases, highlighting the necessity for users to update their applications to mitigate this risk.

References