firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack...

Microsoft Edge for iOS Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

Mozilla Thunderbird < 128.9

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-24 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. So...

Mozilla Thunderbird < 128.9

The version of Thunderbird installed on the remote Windows host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-24 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of thes...

CVE-2025-3029

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

CVE-2025-3029

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability affects Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

CVE-2025-3029

CVE-2025-3029 describes a URL spoofing vulnerability caused by crafted URLs with specific Unicode characters that can mask the true origin of a page. The advisory text in connected sources confirms affected products include Firefox (versions before 137 and ESR before 128.9) and Thunderbird (versi...

CVE-2025-3029

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

CVE-2025-3029 URL Bar Spoofing via non-BMP Unicode characters

A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9...

Mozilla Thunderbird ESR < 128.9

The version of Thunderbird ESR installed on the remote macOS or Mac OS X host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-24 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8...

Security Vulnerabilities fixed in Thunderbird ESR 128.9 — Mozilla

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack. Memory safety bugs present in Firefox 136,...

Security Vulnerabilities fixed in Thunderbird 137 — Mozilla

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. Leaking of file descriptors from the fork server to web content processes could allow for...

Mozilla Firefox ESR < 128.9

The version of Firefox ESR installed on the remote Windows host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-22 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of thes...

PT-2025-14104

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 137 Firefox ESR versions prior to 128.9 Thunderbird versions prior to 137 Thunderbird ESR versions prior to 128.9 Description A crafted URL containing specific Unicode characters could hide the true origin of the page...

Mozilla Firefox < 137.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 137.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-20 advisory. - Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory...

Security Vulnerabilities fixed in Firefox 137 — Mozilla

JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free. An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function. Leaking of file descriptors from the fork server to web content processes could allow for...

Mozilla -- URL spoofing attack

[email protected] reports: A crafted URL containing specific Unicode characters could have hidden the true origin of the page, resulting in a potential spoofing attack...

Mozilla Thunderbird ESR < 128.9

The version of Thunderbird ESR installed on the remote Windows host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-24 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of...

Mozilla Thunderbird < 137.0

The version of Thunderbird installed on the remote Windows host is prior to 137.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-23 advisory. - Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory...

Mozilla Firefox ESR < 128.9

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 128.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-22 advisory. - Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. So...