PT-2025-37932 · Mozilla+1 · Thunderbird+2

Nikolaos Mourousias · Published 2025-09-16 · Updated 2025-10-23 · CVE-2025-10531

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 143 Thunderbird versions prior to 143

Description The software contains a flaw. Affected versions are susceptible to an unspecified issue.

Recommendations Update Firefox to version 143 or later. Update Thunderbird to version 143 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

ALT-PU-2025-12559

ALT-PU-2025-12562

BDU:2025-11334

CVE-2025-10531

OPENSUSE-SU-2025:15565-1

Affected Products

Alt Linux

Firefox

Thunderbird

References · 30

• https://mozilla.org/security/advisories/mfsa2025-77 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-10531 · Vendor Advisory
• https://mozilla.org/security/advisories/mfsa2025-73 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-10531 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15565-1 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-77 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-10531 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-10531 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-10531 · Security Note
• https://bdu.fstec.ru/vul/2025-11334 · Security Note
• https://wiki.astralinux.ru/astra-linux-se18-bulletin-2025-1113SE18 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2025-1202SE17 · Vendor Advisory
• https://mozilla.org/en-US/security/advisories/mfsa2025-73/#CVE-2025-10531 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-10531 · Vendor Advisory