CVE-2025-6429

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-6429", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "state": "PUBLISHED", "assignerShortName": "mozilla", "dateReserved": "2025-06-20T14:51:34.184Z", "datePublished": "2025-06-24T12:28:00.819Z", "dateUpdated": "2026-04-13T14:30:42.931Z"}, "containers": {"cna": {"affected": [{"product": "Firefox", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "128.12", "lessThanOrEqual": "128.*", "versionType": "rpm"}, {"status": "unaffected", "version": "140", "lessThanOrEqual": "*", "versionType": "rpm"}]}, {"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"status": "unaffected", "version": "128.12", "lessThanOrEqual": "128.*", "versionType": "rpm"}, {"status": "unaffected", "version": "140", "lessThanOrEqual": "*", "versionType": "rpm"}]}], "descriptions": [{"lang": "en", "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an <code>embed</code> tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12."}]}], "title": "Incorrect parsing of URLs could have allowed embedding of youtube.com", "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970658"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"}], "credits": [{"lang": "en", "value": "Masato Kinugawa"}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:30:42.931Z"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-116", "lang": "en", "description": "CWE-116 Improper Encoding or Escaping of Output"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-06-25T14:21:21.354270Z", "id": "CVE-2025-6429", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-25T14:28:51.535Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00029.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T20:07:03.248Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html"}, {"url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00029.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-11-03T20:07:03.248Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-6429", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-25T14:21:21.354270Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-116", "description": "CWE-116 Improper Encoding or Escaping of Output"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-06-25T14:21:23.828Z"}}], "cna": {"title": "Incorrect parsing of URLs could have allowed embedding of youtube.com", "credits": [{"lang": "en", "value": "Masato Kinugawa"}], "affected": [{"vendor": "Mozilla", "product": "Firefox", "versions": [{"status": "unaffected", "version": "128.12", "versionType": "rpm", "lessThanOrEqual": "128.*"}, {"status": "unaffected", "version": "140", "versionType": "rpm", "lessThanOrEqual": "*"}]}, {"vendor": "Mozilla", "product": "Thunderbird", "versions": [{"status": "unaffected", "version": "128.12", "versionType": "rpm", "lessThanOrEqual": "128.*"}, {"status": "unaffected", "version": "140", "versionType": "rpm", "lessThanOrEqual": "*"}]}], "references": [{"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970658"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"}, {"url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"}], "descriptions": [{"lang": "en", "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "supportingMedia": [{"type": "text/html", "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an <code>embed</code> tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.", "base64": false}]}], "providerMetadata": {"orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "shortName": "mozilla", "dateUpdated": "2026-04-13T14:30:42.931Z"}}}, "cveMetadata": {"cveId": "CVE-2025-6429", "state": "PUBLISHED", "dateUpdated": "2026-04-13T14:30:42.931Z", "dateReserved": "2025-06-20T14:51:34.184Z", "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe", "datePublished": "2025-06-24T12:28:00.819Z", "assignerShortName": "mozilla"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Firefox", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "128.*", "status": "unaffected", "version": "128.12", "versionType": "rpm"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "140", "versionType": "rpm"}]}, {"product": "Thunderbird", "vendor": "Mozilla", "versions": [{"lessThanOrEqual": "128.*", "status": "unaffected", "version": "128.12", "versionType": "rpm"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "140", "versionType": "rpm"}]}], "source": "security@mozilla.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*", "matchCriteriaId": "18420C6D-A5DF-41A4-8A81-F1BBFBA1BE2A", "versionEndExcluding": "128.12.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*", "matchCriteriaId": "77D2BF2A-26A3-4664-93B5-B41BCF17AC9E", "versionEndExcluding": "140.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12."}, {"lang": "es", "value": "Firefox podr\u00eda haber analizado incorrectamente una URL y reescrito el dominio youtube.com al analizar la URL especificada en una etiqueta 'embed'. Esto podr\u00eda haber eludido las comprobaciones de seguridad del sitio web que restring\u00edan los dominios que los usuarios pod\u00edan incrustar. Esta vulnerabilidad afecta a Firefox con versiones anteriores a 140 y Firefox con ESR inferior a 128.12."}], "id": "CVE-2025-6429", "lastModified": "2026-09-30T18:10:00.190", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-6429", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-06-25T14:21:21.354270Z", "version": "2.0.3"}}]}, "published": "2025-06-24T13:15:23.877", "references": [{"source": "security@mozilla.org", "tags": ["Permissions Required"], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1970658"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2025-51/"}, {"source": "security@mozilla.org", "tags": ["Vendor Advisory"], "url": "https://www.mozilla.org/security/advisories/mfsa2025-53/"}, {"source": "security@mozilla.org", "url": "https://www.mozilla.org/security/advisories/mfsa2025-54/"}, {"source": "security@mozilla.org", "url": "https://www.mozilla.org/security/advisories/mfsa2025-55/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/06/msg00029.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/07/msg00002.html"}], "sourceIdentifier": "security@mozilla.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-116"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2025:10073", "cpe": "cpe:/o:redhat:enterprise_linux:10.0", "package": "firefox-0:128.12.0-1.el10_0", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10195", "cpe": "cpe:/o:redhat:enterprise_linux:10.0", "package": "thunderbird-0:128.12.0-1.el10_0", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10181", "cpe": "cpe:/o:redhat:rhel_els:7", "package": "firefox-0:128.12.0-1.el7_9", "product_name": "Red Hat Enterprise Linux 7 Extended Lifecycle Support", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10074", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "firefox-0:128.12.0-1.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10246", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "thunderbird-0:128.12.0-1.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10166", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "thunderbird-0:128.12.0-1.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10182", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "firefox-0:128.12.0-1.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10165", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "thunderbird-0:128.12.0-1.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10184", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "firefox-0:128.12.0-1.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10164", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "thunderbird-0:128.12.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10183", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "firefox-0:128.12.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10164", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "thunderbird-0:128.12.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10183", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "firefox-0:128.12.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10164", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "thunderbird-0:128.12.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10183", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "firefox-0:128.12.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10163", "cpe": "cpe:/a:redhat:rhel_tus:8.8", "package": "thunderbird-0:128.12.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10186", "cpe": "cpe:/a:redhat:rhel_tus:8.8", "package": "firefox-0:128.12.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10163", "cpe": "cpe:/a:redhat:rhel_e4s:8.8", "package": "thunderbird-0:128.12.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10186", "cpe": "cpe:/a:redhat:rhel_e4s:8.8", "package": "firefox-0:128.12.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10072", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "firefox-0:128.12.0-1.el9_6", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10196", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "thunderbird-0:128.12.0-1.el9_6", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10161", "cpe": "cpe:/a:redhat:rhel_e4s:9.0", "package": "thunderbird-0:128.12.0-1.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10187", "cpe": "cpe:/a:redhat:rhel_e4s:9.0", "package": "firefox-0:128.12.0-1.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10160", "cpe": "cpe:/a:redhat:rhel_e4s:9.2", "package": "thunderbird-0:128.12.0-1.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10185", "cpe": "cpe:/a:redhat:rhel_e4s:9.2", "package": "firefox-0:128.12.0-1.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date": "2025-07-02T00:00:00Z"}, {"advisory": "RHSA-2025:10159", "cpe": "cpe:/a:redhat:rhel_eus:9.4", "package": "thunderbird-0:128.12.0-1.el9_4", "product_name": "Red Hat Enterprise Linux 9.4 Extended Update Support", "release_date": "2025-07-01T00:00:00Z"}, {"advisory": "RHSA-2025:10188", "cpe": "cpe:/a:redhat:rhel_eus:9.4", "package": "firefox-0:128.12.0-1.el9_4", "product_name": "Red Hat Enterprise Linux 9.4 Extended Update Support", "release_date": "2025-07-02T00:00:00Z"}], "bugzilla": {"description": "firefox: thunderbird: Incorrect parsing of URLs could have allowed embedding of youtube.com", "id": "2374561", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2374561"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "status": "verified"}, "cwe": "CWE-706", "details": ["Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerability affects Firefox < 140 and Firefox ESR < 128.12.", "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an embed tag. This could have bypassed website security checks that restricted which domains users were allowed to embed."], "name": "CVE-2025-6429", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "rhel10/firefox-flatpak", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "rhel10/thunderbird-flatpak", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "firefox", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "thunderbird", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2025-06-24T12:28:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-6429\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-6429\nhttps://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6429"], "statement": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.", "threat_severity": "Moderate"}

{"analysis": {"en": {"generated_at": "2026-04-20T20:27:44.465768+00:00", "value": {"mitigation_remediation": ["Upgrade Firefox to version 140 or later, or the ESR 128.12 release or newer.", "Upgrade Thunderbird to version 140 or later, or the ESR 128.12 release or newer.", "If an upgrade cannot be performed immediately, adjust browser configuration to block or restrict embedded content from third\u2011party domains, such as by using site\u2011content restrictions or disabling the embed tag handling in browser settings."], "summary": {"action": "Immediate Patch", "impact": "Domain Reassignment in Embedded Content"}, "threat_synthesis": {"affected_systems": "Versions of Mozilla Firefox before 140 (or the ESR 128.12 release) and versions of Mozilla Thunderbird before 140 (or the ESR 128.12 release) are susceptible. The CVE list includes Common Platform Enumeration entries that reference Red\u00a0Hat Enterprise Linux families \u2014 8, 9, and 10 (including rhel_aus, rhel_e4s, rhel_eus, and rhel_tus variants). No other operating systems are explicitly listed in the CVE data, so the impact is confined to platforms where these browsers are deployed according to the provided CPEs.", "description_and_impact": "Firefox could incorrectly parse a URL in an embed tag and rewrite it so that the resulting domain becomes youtube.com. This misparsing allowed a malicious web page to bypass site\u2011wide restrictions that limit which domains may be embedded, potentially exposing users to untrusted content. The flaw combines string manipulation failure (CWE\u2011116) with improper handling of embedded elements (CWE\u2011706). The impact is the unintended loading of third\u2011party content, which can compromise the integrity of the browsing experience, although it does not directly lead to code execution.", "risk_and_exploitability": "The CVSS score of 6.5 indicates a medium\u2011to\u2011high risk, whereas the EPSS score of less than 1% suggests exploitation is considered unlikely at present. The vulnerability is not listed in CISA\u2019s KEV catalog, indicating no widespread exploitation has been observed. Based on the description, the likely attack vector is a crafted web page that includes an embed tag with a URL designed to trigger the misparse; this inference assumes that attackers can control the content served to the victim\u2019s browser. No privileged interaction or remote code execution is required. Exploitation is therefore limited to deceptive manipulation of the browsing context within the victim\u2019s browser."}}}}, "created": "2025-07-06T22:16:30.430108+00:00", "updated": "2026-04-20T20:30:16.073437+00:00", "vendors": ["mozilla", "mozilla$PRODUCT$firefox", "mozilla$PRODUCT$firefox_esr"]}