FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Mozilla -- Same-origin policy bypass

Affected packages
firefox < 142,2
firefox-esr < 140.2
thunderbird < 142

Details

VuXML ID f6219d24-7eb0-11f0-ba14-b42e991fc52e
Discovery 2025-08-19
Entry 2025-08-21

security@mozilla.org reports:

'Same-origin policy bypass in the Graphics: Canvas2D component.'

References

CVE Name CVE-2025-9180
URL https://nvd.nist.gov/vuln/detail/CVE-2025-9180