CVE 9.8 CRITICAL

CVE-2025-8042_CVE-2025-8042

9.8 / 10
CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability affects Firefox < 141.

Basic Information

ID CVE-2025-8042
Source mozilla
Published Aug 19, 2025 at 20:52
Modified Aug 20, 2025 at 15:18

Affected Product

Vendor Mozilla
Product Firefox
Version unspecified
Affected Versions Mozilla Firefox unspecified

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.