Vulnerabilities CVE-2025-4083

CVE-2025-4083

None

Open

TLP:CLEAR

Process isolation bypass using "javascript:" URI links in cross-origin frames

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.

Details

EPSS Score ⓘ: 0.43%

35.8th percentile
Confidence: 90%
Published: Apr 29, 2025
Last Modified: Jul 25, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.