CVE catalog

CVE-2025-0237

firefox-esr: CVE-2025-0237

[CVE catalog]

Severity
Medium · CVSS 6.8CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N
Published
Source
[NVD] · [CVE record]
EPSS
0.60% · Oct 25, 2026

The WebChannel API, which is used to transport various information across processes, did not check the sending principal but rather accepted the principal being sent. This could have led to privilege escalation attacks. This vulnerability was fixed in Firefox 134, Firefox ESR 128.6, Thunderbird 134, and Thunderbird 128.6.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianfirefox-esrsid153.5.1esr-1fixed
Debianfirefox-esrforky153.5.1esr-1fixed
Debianfirefox-esrtrixie140.15.0esr-1~deb13u1fixed
Debianfirefox-esrtrixie-security153.5.1esr-1~deb13u1fixed
Debianfirefox-esrbookworm140.12.0esr-1~deb12u1fixed
Debianfirefox-esrbookworm-security153.5.1esr-1~deb12u1fixed
Debianthunderbirdsid1:153.5.1esr-1fixed
Debianthunderbirdforky1:153.5.0esr-1fixed
Debianthunderbirdtrixie1:140.12.0esr-1~deb13u1fixed
Debianthunderbirdtrixie-security1:153.5.1esr-1~deb13u2fixed
Debianthunderbirdbookworm1:140.12.0esr-1~deb12u1fixed
Debianthunderbirdbookworm-security1:153.5.1esr-1~deb12u1fixed
CpefirefoxNot reported134.0fixed
CpethunderbirdNot reported134.0fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0487.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0488.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0488.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0489.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0492.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0493.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0494.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0496.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0498.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0499.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04100.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04100.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04101.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04102.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04103.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04104.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04105.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.5+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04107.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04110.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04110.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04115.0+build2-0ubuntu0.20.04.3vulnerable
Ubuntufirefox20.04115.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04116.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0.3+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04119.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04119.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04120.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04120.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04121.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04121.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04122.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04122.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04123.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04123.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04125.0.2+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04125.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04126.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04126.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04127.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04128.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04129.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04129.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04130.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04130.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0+build1.1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04132.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04133.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04134.0+build1-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntumozjs10222.04102.11.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.12.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.13.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.15.1-0ubuntu0.22.04.1vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable
Ubuntumozjs9122.0491.5.1-0ubuntu1vulnerable
Ubuntumozjs9122.0491.6.0-1vulnerable
Ubuntumozjs9122.0491.6.0-2vulnerable
Ubuntumozjs9122.0491.7.0-2vulnerable
Ubuntumozjs9122.0491.10.0-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.1.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.3.2+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.4.0+build1.1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.4.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.5.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.5.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.6.1+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.7.0+build1-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.7.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.8.0+build2-0ubuntu1vulnerable
Ubuntuthunderbird22.041:91.9.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:91.11.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.2.2+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.4.2+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.7.1+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.8.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.9.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.10.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.11.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.13.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.15.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:102.15.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.3.1+build1-0ubuntu0.22.04.2vulnerable
Ubuntuthunderbird22.041:115.4.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.5.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.6.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.8.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.9.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.10.1+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.11.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.12.0+build3-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.13.0+build5-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.15.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.16.0+build2-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:115.18.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:128.12.0+build1-0ubuntu0.22.04.1vulnerable
Ubuntuthunderbird22.041:140.7.1+build1-0ubuntu0.22.04.1fixed
Ubuntumozjs10224.04102.15.1-1vulnerable
Ubuntumozjs10224.04102.15.1-3ubuntu2vulnerable
Ubuntumozjs11524.04115.3.0-0ubuntu1vulnerable
Ubuntumozjs11524.04115.4.0-2vulnerable
Ubuntumozjs11524.04115.5.0-1vulnerable
Ubuntumozjs11524.04115.6.0-1vulnerable
Ubuntumozjs11524.04115.7.0-4vulnerable
Ubuntumozjs11524.04115.8.0-1vulnerable
Ubuntumozjs11524.04115.9.0-1vulnerable
Ubuntumozjs11524.04115.9.0-1build1vulnerable
Ubuntumozjs11524.04115.10.0-1vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0487.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0488.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0488.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0489.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0492.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0493.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0494.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0496.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0498.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0499.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04100.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04100.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04101.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04102.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04103.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04104.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04105.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.5+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04107.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04110.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04110.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04115.0+build2-0ubuntu0.20.04.3vulnerable
Ubuntufirefox20.04115.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04116.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0.3+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04119.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04119.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04120.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04120.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04121.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04121.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04122.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04122.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04123.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04123.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04124.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04125.0.2+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04125.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04126.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04126.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04127.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04128.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04129.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04129.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04130.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04130.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0+build1.1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04131.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04132.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04133.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04134.0+build1-0ubuntu0.20.04.1fixed
SuseMozillaFirefoxlinux enterprise server 12 sp5-ltss128.6.0-112.243.1fixed
SuseMozillaFirefoxlinux enterprise server ltss extended security 12 sp5128.6.0-112.243.1fixed
OpensuseMozillaThunderbirdtumbleweed128.6.0-1.1fixed
Opensusemozjs128tumbleweed128.7.0-1.1fixed
SuseMozillaThunderbirdlinux enterprise module for package hub 15 sp6128.6.0-150200.8.197.1fixed
SuseMozillaThunderbirdlinux enterprise workstation extension 15 sp6128.6.0-150200.8.197.1fixed
OpensuseMozillaThunderbirdleap 15.6128.6.0-150200.8.197.1fixed
Opensusefirefox-esrtumbleweed128.6.0-1.1fixed
SuseMozillaFirefoxlinux enterprise module for desktop applications 15 sp6128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise high performance computing 15 sp3-ltss128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise high performance computing 15 sp4-espos128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise high performance computing 15 sp4-ltss128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise high performance computing 15 sp5-espos128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise high performance computing 15 sp5-ltss128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise server 15 sp3-ltss128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise server 15 sp4-ltss128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise server 15 sp5-ltss128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 15 sp3128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 15 sp4128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxlinux enterprise server for sap applications 15 sp5128.6.0-150200.152.167.1fixed
SuseMozillaFirefoxenterprise storage 7.1128.6.0-150200.152.167.1fixed
OpensuseMozillaFirefoxleap 15.6128.6.0-150200.152.167.1fixed
OpensuseMozillaFirefoxtumbleweed134.0-1.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianfirefox-esrsourcesid128.6.0esr-1not yet assignedNot reportedNot reported
Debianfirefox-esrsourceforky128.6.0esr-1not yet assignedNot reportedNot reported
Debianfirefox-esrsourcetrixie128.6.0esr-1not yet assignedNot reportedNot reported
Debianfirefox-esrsourcebookworm128.6.0esr-1~deb12u1not yet assignedNot reportedNot reported
Debianthunderbirdsourcesid1:128.6.0esr-1not yet assignedNot reportedNot reported
Debianthunderbirdsourceforky1:128.6.0esr-1not yet assignedNot reportedNot reported
Debianthunderbirdsourcetrixie1:128.6.0esr-1not yet assignedNot reportedNot reported
Debianthunderbirdsourcebookworm1:128.6.0esr-1~deb12u1not yet assignedNot reportedNot reported
CpefirefoxcpeNot reported134.0Not reportedNVD-CVE-2025-0237Not reported
CpethunderbirdcpeNot reported134.0Not reportedNVD-CVE-2025-0237Not reported
Ubuntufirefoxdeb20.04134.0+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2025-0237Not reported
Ubuntuthunderbirddeb22.041:140.7.1+build1-0ubuntu0.22.04.1Not reportedUBUNTU-CVE-2025-0237Not reported
Ubuntufirefoxdeb20.04134.0+build1-0ubuntu0.20.04.1Not reportedUSN-7191-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 12 sp5-ltss128.6.0-112.243.1Not reportedSUSE-SU-2025:0056-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server ltss extended security 12 sp5128.6.0-112.243.1Not reportedSUSE-SU-2025:0056-1Not reported
OpensuseMozillaThunderbirdrpmtumbleweed128.6.0-1.1Not reportedOPENSUSE-SU-2025:14648-1Not reported
Opensusemozjs128rpmtumbleweed128.7.0-1.1Not reportedOPENSUSE-SU-2025:14764-1Not reported
SuseMozillaThunderbirdrpmlinux enterprise module for package hub 15 sp6128.6.0-150200.8.197.1Not reportedSUSE-SU-2025:0080-1Not reported
SuseMozillaThunderbirdrpmlinux enterprise workstation extension 15 sp6128.6.0-150200.8.197.1Not reportedSUSE-SU-2025:0080-1Not reported
OpensuseMozillaThunderbirdrpmleap 15.6128.6.0-150200.8.197.1Not reportedSUSE-SU-2025:0080-1Not reported
Opensusefirefox-esrrpmtumbleweed128.6.0-1.1Not reportedOPENSUSE-SU-2025:14619-1Not reported
SuseMozillaFirefoxrpmlinux enterprise module for desktop applications 15 sp6128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise high performance computing 15 sp3-ltss128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise high performance computing 15 sp4-espos128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise high performance computing 15 sp4-ltss128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise high performance computing 15 sp5-espos128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise high performance computing 15 sp5-ltss128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 15 sp3-ltss128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 15 sp4-ltss128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server 15 sp5-ltss128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 15 sp3128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 15 sp4128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmlinux enterprise server for sap applications 15 sp5128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
SuseMozillaFirefoxrpmenterprise storage 7.1128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
OpensuseMozillaFirefoxrpmleap 15.6128.6.0-150200.152.167.1Not reportedSUSE-SU-2025:0059-1Not reported
OpensuseMozillaFirefoxrpmtumbleweed134.0-1.1Not reportedOPENSUSE-SU-2025:14630-1Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[Debian 12 (Bookworm)]

  • Details (4)
    • 140.12.0esr-1~deb12u1 · amd64 · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · arm64 · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · amd64 · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · arm64 · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

  • Source package: [firefox-esr]

    Details (4)
    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.12.0esr-1~deb12u1 · all · bookworm

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

    • 140.14.0esr-1~deb12u1 · all · bookworm-security

      Fixed · Fixed: 128.6.0esr-1~deb12u1

      dsa · firefox-esr · debian · bookworm; dsa · firefox-esr · debian · 12

Next results

Observed:

References