CVE-2025-4083

Description

A process isolation vulnerability in Thunderbird stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level documents process instead of the intended frame, potentially enabling a sandbox escape. This vulnerability affects Firefox < 138, Firefox ESR < 128.10, Firefox ESR < 115.23, Thunderbird < 138, and Thunderbird < 128.10.

Risk Information

Base Score
9.1
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
Exploitation Probability
0.406

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities are fixed in Mozilla Firefox (138.0)Windows
Multiple vulnerabilities are fixed in Mozilla Firefox (x64) (138.0)Windows
Vulnerabilities CVE-2025-2817,CVE-2025-4082,CVE-2025-4083,CVE-2025-4084 are fixed in Mozilla Firefox ESR (115) (115.23.0)Windows
Vulnerabilities CVE-2025-2817,CVE-2025-4082,CVE-2025-4083,CVE-2025-4084 are fixed in Mozilla Firefox ESR (115) (x64) (115.23.0)Windows
Multiple vulnerabilities are fixed in Mozilla Firefox ESR (128) (128.10.0)Windows
Multiple vulnerabilities are fixed in Mozilla Firefox ESR (128) (x64) (128.10.0)Windows
Multiple vulnerabilities are fixed in Mozilla Thunderbird (138.0)Windows
Multiple vulnerabilities are fixed in Mozilla Thunderbird (x64) (138.0)Windows
Multiple vulnerabilities are fixed in Mozilla Thunderbird 128 (128.10.0)Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 137.99Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 137.99Windows
Vulnerabilities CVE-2025-4082,CVE-2025-4083,CVE-2025-4084 are affected in Mozilla Firefox (x64) 115.22Windows
Multiple Vulnerabilities are affected in Mozilla Firefox (x64) 128.9Windows
Vulnerabilities CVE-2025-4082,CVE-2025-4083,CVE-2025-4084 are affected in Mozilla_Firefox 115.22Windows
Multiple Vulnerabilities are affected in Mozilla_Firefox 128.9Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 128.9.99Windows
Multiple Vulnerabilities are affected in Mozilla Thunderbird 137.99Windows
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (138.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (138.0.1)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (138.0.3)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox For Mac (138.0.4)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (138.0)Mac
Multiple vulnerabilities are fixed in Mozilla Thunderbird For Mac (128.10.0)Mac
Multiple vulnerabilities are fixed in Mozilla Firefox ESR for MAC 128.10.0Mac
Multiple vulnerabilities are fixed in Mozilla Firefox ESR for MAC 128.10.1Mac
Vulnerabilities CVE-2025-4084,CVE-2025-2817,CVE-2025-4082,CVE-2025-4083 are fixed in Mozilla Firefox For Mac 115.23Mac
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-zh-tw_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-zh-cn_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-xh_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-vi_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-uz_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ur_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-uk_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-trs_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-tr_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-tl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-th_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-tg_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-te_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ta_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-szl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sv-se_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sr_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sq_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-son_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-skr_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sk_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-si_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sco_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sc_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-sat_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ru_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ro_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-rm_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-pt-pt_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-pt-br_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-pl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-pa-in_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-oc_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-nn-no_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-nl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ne-np_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-nb-no_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-my_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ms_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-mr_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-mk_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-lv_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-lt_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-lij_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ko_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-kn_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-km_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-kk_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-kab_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ka_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ja_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-it_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-is_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-id_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ia_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-hy-am_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-hu_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-hsb_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-hr_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-hi-in_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-he_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-gu-in_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-gn_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-gl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-gd_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ga-ie_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-fy-nl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-fur_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-fr_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-fi_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ff_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-fa_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-eu_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-et_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-es-mx_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-es-es_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-es-cl_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-es-ar_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-eo_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-en-gb_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-en-ca_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-el_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-dsb_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-de_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-da_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-cy_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-cs_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-cak_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ca-valencia_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ca_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-bs_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-br_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-bn_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-bg_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-be_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-az_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ast_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ar_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-an_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-all_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-af_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr-l10n-ach_128.10.0esr-1~deb12u1_all.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr_128.10.0esr-1~deb12u1_i386.debLinux
firefox-esr security update(DSA-5910-1) firefox-esr_128.10.0esr-1~deb12u1_amd64.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ca_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-en-ca_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-el_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-dsb_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-de_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-da_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-cy_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-cs_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-cak_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-br_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-bg_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-be_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ast_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ar_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-all_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-af_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird_128.10.0esr-1~deb12u1_i386.debLinux
thunderbird security update(DSA-5912-1) thunderbird_128.10.0esr-1~deb12u1_amd64.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-en-gb_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ms_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-nb-no_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-nl_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-nn-no_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-pa-in_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-pl_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-pt-br_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-pt-pt_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-rm_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ro_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ru_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-es-ar_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-sl_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-sq_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-sr_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-sv-se_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-th_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-tr_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-uk_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-uz_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-vi_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-zh-cn_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-zh-tw_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-sk_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-es-es_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-es-mx_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-et_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-eu_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-fi_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-fr_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-fy-nl_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ga-ie_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-gd_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-gl_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-he_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-lv_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-hsb_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-hu_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-hy-am_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-id_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-is_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-it_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ja_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ka_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-kab_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-kk_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-ko_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-lt_128.10.0esr-1~deb12u1_all.debLinux
thunderbird security update(DSA-5912-1) thunderbird-l10n-hr_128.10.0esr-1~deb12u1_all.debLinux
SUSE-SU-2025:1436-1(Desktop Applications Module 15-SP6) MozillaFirefox-128.10.0-150200.152.179.1.x86_64.rpmLinux
SUSE-SU-2025:1436-1(Desktop Applications Module 15-SP6) MozillaFirefox-debuginfo-128.10.0-150200.152.179.1.x86_64.rpmLinux
SUSE-SU-2025:1436-1(Desktop Applications Module 15-SP6) MozillaFirefox-debugsource-128.10.0-150200.152.179.1.x86_64.rpmLinux
SUSE-SU-2025:1436-1(Desktop Applications Module 15-SP6) MozillaFirefox-devel-128.10.0-150200.152.179.1.noarch.rpmLinux
SUSE-SU-2025:1436-1(Desktop Applications Module 15-SP6) MozillaFirefox-translations-common-128.10.0-150200.152.179.1.x86_64.rpmLinux
SUSE-SU-2025:1436-1(Desktop Applications Module 15-SP6) MozillaFirefox-translations-other-128.10.0-150200.152.179.1.x86_64.rpmLinux
Firefox-x11 update (ELSA-2025-4443) firefox-x11-128.10.0-1.0.1.el9_5.x86_64.rpmLinux
Firefox update (ELSA-2025-4443) firefox-128.10.0-1.0.1.el9_5.x86_64.rpmLinux
(RHSA-2025:4443)Important: security update firefox-x11-128.10.0-1.el9_5.x86_64.rpmLinux
(RHSA-2025:4443)Important: security update firefox-128.10.0-1.el9_5.x86_64.rpmLinux
(RHSA-2025:4458)Important: security update firefox-128.10.0-1.el8_10.x86_64.rpmLinux
(RHSA-2025:4460)Important: security update thunderbird-128.10.0-1.el9_5.x86_64.rpmLinux
Firefox update (ELSA-2025-4458) firefox-128.10.0-1.0.1.el8_10.x86_64.rpmLinux
Thunderbird update (ELSA-2025-4460) thunderbird-128.10.0-1.0.1.el9_5.x86_64.rpmLinux
(RHSA-2025:4797)Important: security update thunderbird-128.10.0-1.el8_10.x86_64.rpmLinux
Thunderbird update (ELSA-2025-4797) thunderbird-128.10.0-1.0.1.el8_10.x86_64.rpmLinux
(RHSA-2025:7428)Important: security update firefox-x11-128.10.0-1.el9_6.x86_64.rpmLinux
(RHSA-2025:7428)Important: security update firefox-128.10.0-1.el9_6.x86_64.rpmLinux
Firefox-x11 update (ELSA-2025-7428) firefox-x11-128.10.0-1.0.1.el9_6.x86_64.rpmLinux
Firefox update (ELSA-2025-7428) firefox-128.10.0-1.0.1.el9_6.x86_64.rpmLinux
firefox Security Update (ALAS-2025-976) firefox-128.10.0-1.amzn2023.0.2.x86_64.rpmLinux
(RHSA-2025:7507)Important: security update thunderbird-128.10.0-1.el10_0.x86_64.rpmLinux
(RHSA-2025:7506)Important: security update firefox-128.10.0-1.el10_0.x86_64.rpmLinux
Important: thunderbird security update thunderbird-128.10.0-1.el8_10.alma.1.x86_64.rpmLinux
Mozilla Open Source mail and newsgroup client (USN-7663-1) USN-7663-1 thunderbird_128.12.0+build1-0ubuntu0.22.04.1_amd64.debLinux
firefox security update (RLSA-2025:4443) RLSA-2025:4443 firefox-x11-128.10.0-1.el9_5.x86_64.rpmLinux
firefox security update (RLSA-2025:4443) RLSA-2025:4443 firefox-128.10.0-1.el9_5.x86_64.rpmLinux
firefox security update (RLSA-2025:7428) RLSA-2025:7428 firefox-x11-128.10.0-1.el9_5.x86_64.rpmLinux
firefox security update (RLSA-2025:7428) RLSA-2025:7428 firefox-128.10.0-1.el9_5.x86_64.rpmLinux
thunderbird security update (RLSA-2025:4460) RLSA-2025:4460 thunderbird-128.10.0-1.el9_5.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-347572Mozilla Firefox (138.0)
PATCH-347573Mozilla Firefox (x64) (138.0)
PATCH-347583Mozilla Firefox ESR (115) (115.23.0)
PATCH-347584Mozilla Firefox ESR (115) (x64) (115.23.0)
PATCH-347605Mozilla Thunderbird (138.0)
PATCH-347606Mozilla Thunderbird (x64) (138.0)
PATCH-347661Mozilla Thunderbird 128 (128.10.0)
PATCH-351030Mozilla Firefox (x64) (142.0.1)
PATCH-351029Mozilla Firefox (142.0.1)
PATCH-351030Mozilla Firefox (x64) (142.0.1)
PATCH-351030Mozilla Firefox (x64) (142.0.1)
PATCH-351029Mozilla Firefox (142.0.1)
PATCH-351029Mozilla Firefox (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611870Mozilla Firefox For Mac (142.0.1)
PATCH-611807Mozilla Thunderbird For Mac (142.0)
PATCH-611353Mozilla Thunderbird For Mac (128.12.0)
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-611808Mozilla Firefox ESR for MAC 128.14.0
PATCH-612783Mozilla Firefox For Mac (145.0.1)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234