CVE-2025-4085

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

CVE-2025-4085

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

CVE-2025-4085

CVE-2025-4085 affects Mozilla Firefox (earlier than 138.0) and Mozilla Thunderbird (earlier than 138.0). The issue arises when a content process could abuse the privileged UITour actor to leak sensitive information or escalate privileges. The description consistently identifies the root cause as ...

CVE-2025-4085 Potential information leakage and privilege escalation in UITour actor

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...

CVE-2025-4085

An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138...