PT-2025-49854 · Mozilla+4 · Thunderbird+5

Caro Kann

·

Published

2025-12-09

·

Updated

2026-03-18

·

CVE-2025-14327

CVSS v2.0

7.8

High

VectorAV:N/AC:L/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 146 Thunderbird versions prior to 146
Description A spoofing issue exists in the Downloads Panel component.
Recommendations Update Firefox to version 146 or later. Update Thunderbird to version 146 or later.

Fix

Authentication Bypass by Spoofing

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-290

Related Identifiers

ALSA-2026:0667
ALSA-2026:0694
ALSA-2026:0924
ALSA-2026:2220
ALSA-2026:2271
ALSA-2026:2286
BDU:2025-16356
CVE-2025-14327
MGASA-2026-0013
MGASA-2026-0014
OESA-2026-1085
OESA-2026-1086
OESA-2026-1087
OESA-2026-1088
OESA-2026-1089
OESA-2026-1090
OESA-2026-1264
OESA-2026-1285
OPENSUSE-SU-2025:15813-1
OPENSUSE-SU-2026:10037-1
OPENSUSE-SU-2026:10058-1
OPENSUSE-SU-2026:20041-1
OPENSUSE-SU-2026:20391-1
RHSA-2026:0667
RHSA-2026:0694
RHSA-2026:0924
RHSA-2026:1320
RHSA-2026:1413
RHSA-2026:1414
RHSA-2026:1415
RHSA-2026:1461
RHSA-2026:1462
RHSA-2026:1471
RHSA-2026:1487
RHSA-2026:2041
RHSA-2026:2043
RHSA-2026:2044
RHSA-2026:2047
RHSA-2026:2069
RHSA-2026:2070
RHSA-2026:2073
RHSA-2026:2074
RHSA-2026:2220
RHSA-2026:2231
RHSA-2026:2271
RHSA-2026:2286
SUSE-SU-2026:0122-1
SUSE-SU-2026:0153-1
SUSE-SU-2026:0260-1
SUSE-SU-2026:20086-1
USN-7991-1

Affected Products

Alt Linux
Firefox
Linuxmint
Rocky Linux
Thunderbird
Ubuntu