CVE-2025-8036 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox <…
High CVSS: 8.1

CVE-2025-8036

Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability affects Firefox < 141, Firefox ESR < 140.1, Thunderbird < 141, and Thunderbird < 140.1.
Vendor
Mozilla
Product
Firefox
CWE
CWE-350
Yayın Tarihi
2025-07-22 21:15:50
Güncelleme
2025-11-03 18:17:02
Source Identifier
security@mozilla.org
KEV Date Added
-

Kategoriler

CWE-350 Firefox HIGH Mozilla 2025

Referanslar

https://bugzilla.mozilla.org/show_bug.cgi?id=1960834 https://www.mozilla.org/security/advisories/mfsa2025-56/ https://www.mozilla.org/security/advisories/mfsa2025-59/ https://www.mozilla.org/security/advisories/mfsa2025-61/ https://www.mozilla.org/security/advisories/mfsa2025-63/ https://www.kb.cert.org/vuls/id/652514