CVE-2025-6429

Mozilla Firefox and Thunderbird are vulnerable to a security bypass where the software could incorrectly parse a URL and rewrite it to the youtube.com domain when processing a URL within an embed tag. This flaw allows an attacker to bypass website security restrictions that limit which domains us...