PT-2025-49854 · Mozilla+4 · Thunderbird+5

Caro Kann

·

Publicado

2025-12-09

·

Atualizado

2026-03-18

·

CVE-2025-14327

CVSS v2.0

7.8

Alta

VetorAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Thunderbird versions prior to 146
Description A spoofing issue exists in the Downloads Panel component.
Recommendations Update Firefox to version 146 or later. Update Thunderbird to version 146 or later.

Correção

Authentication Bypass by Spoofing

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-290

Identificadores relacionados

ALSA-2026:0667
ALSA-2026:0694
ALSA-2026:0924
ALSA-2026:2220
ALSA-2026:2271
ALSA-2026:2286
BDU:2025-16356
CVE-2025-14327
MGASA-2026-0013
MGASA-2026-0014
OESA-2026-1085
OESA-2026-1086
OESA-2026-1087
OESA-2026-1088
OESA-2026-1089
OESA-2026-1090
OESA-2026-1264
OESA-2026-1285
OPENSUSE-SU-2025:15813-1
OPENSUSE-SU-2026:10037-1
OPENSUSE-SU-2026:10058-1
OPENSUSE-SU-2026:20041-1
OPENSUSE-SU-2026:20391-1
RHSA-2026:0667
RHSA-2026:0694
RHSA-2026:0924
RHSA-2026:1320
RHSA-2026:1413
RHSA-2026:1414
RHSA-2026:1415
RHSA-2026:1461
RHSA-2026:1462
RHSA-2026:1471
RHSA-2026:1487
RHSA-2026:2041
RHSA-2026:2043
RHSA-2026:2044
RHSA-2026:2047
RHSA-2026:2069
RHSA-2026:2070
RHSA-2026:2073
RHSA-2026:2074
RHSA-2026:2220
RHSA-2026:2231
RHSA-2026:2271
RHSA-2026:2286
SUSE-SU-2026:0122-1
SUSE-SU-2026:0153-1
SUSE-SU-2026:0260-1
SUSE-SU-2026:20086-1
USN-7991-1

Produtos afetados

Alt Linux
Firefox
Linuxmint
Rocky Linux
Thunderbird
Ubuntu