CVE-2025-1935 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability affects Firefox < 136, Firefox ESR < 1…
Medium CVSS: 4.3

CVE-2025-1935

A web page could trick a user into setting that site as the default handler for a custom URL protocol. This vulnerability affects Firefox < 136, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.
Vendor
Mozilla
Product
Firefox
CWE
CWE-79
Yayın Tarihi
2025-03-04 14:15:38
Güncelleme
2025-11-03 21:18:54
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-79 Firefox MEDIUM Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1866661 https://www.mozilla.org/security/advisories/mfsa2025-14/ https://www.mozilla.org/security/advisories/mfsa2025-16/ https://www.mozilla.org/security/advisories/mfsa2025-17/ https://www.mozilla.org/security/advisories/mfsa2025-18/ https://lists.debian.org/debian-lts-announce/2025/03/msg00006.html