PT-2025-33840 · Mozilla+2 · Firefox Esr+3

Renwa · Publicado 2025-08-19 · Atualizado 2025-11-19 · CVE-2025-9183

Positive Technologies (AI Summary) · Pt

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:N

Nome do Software Vulnerável e Versões Afetadas: Versões do Firefox anteriores à 142 Versões do Firefox ESR anteriores à 140.2

Descrição: Existe um problema de spoofing no componente da Barra de Endereços.

Recomendações: Atualize o Firefox para a versão 142 ou posterior. Atualize o Firefox ESR para a versão 140.2 ou posterior.

Correção

UI Misrepresentation of Critical Information

Enumeração de Fraquezas

CWE-451

Identificadores relacionados

ALT-PU-2025-11100

ALT-PU-2025-12562

ALT-PU-2025-14599

BDU:2025-10501

CVE-2025-9183

OESA-2025-2340

OESA-2025-2341

OESA-2025-2359

OESA-2025-2360

OESA-2025-2361

OPENSUSE-SU-2025:15467-1

OPENSUSE-SU-2025:15516-1

SUSE-SU-2025:03008-1

SUSE-SU-2025:03009-1

SUSE-SU-2025_03008-1

SUSE-SU-2025_03009-1

Produtos afetados

Alt Linux

Firefox

Firefox Esr

Suse

Referências · 62

• https://mozilla.org/security/advisories/mfsa2025-67 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-9183 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-10533 · Nota de Segurança
• https://mozilla.org/en-US/security/advisories/mfsa2025-64/#CVE-2025-9183 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2025:15516-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-9181 · Nota
• https://osv.dev/vulnerability/OESA-2025-2359 · Aviso do Fabricante
• https://osv.dev/vulnerability/OESA-2025-2340 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-9183 · Nota
• https://suse.com/security/cve/CVE-2025-9185 · Nota
• https://mozilla.org/security/advisories/mfsa2025-64 · Aviso do Fabricante
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2025-2341 · Nota
• https://osv.dev/vulnerability/OESA-2025-2361 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-10527 · Nota de Segurança
• https://osv.dev/vulnerability/SUSE-SU-2025:03009-1 · Aviso do Fabricante