CVE-2025-1939

Katalog CVE

CVSS 3.9 · Low EPSS 0,19%

Kerentanan Exposure of Private Personal Information to an Unauthorized Actor pada mozilla firefox. Skor CVSS 3.1 3.9 (Low) menurut CISA ADP.

Deskripsi (NVD)

Android apps can load web pages using the Custom Tabs feature. This feature supports a transition animation that could have been used to trick a user into granting sensitive permissions by hiding what the user was actually clicking. This vulnerability was fixed in Firefox 136.

Rincian

Terbit di NVD

4 Maret 2025

Terakhir diubah

5 Oktober 2026

Status NVD

Modified

CVSS 3.1

3.9 (Low), sumber CISA ADP
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 7,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.mozilla.org/security/advisories/mfsa2025-14/ advisory vendor
• https://bugzilla.mozilla.org/show_bug.cgi?id=1928334 issue tracking
• https://taptrap.click product