CVE-2025-5687

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Permissions Required
• mozilla.org/security/advisories/mfsa2025-48 · Vendor Advisory

vpn のその他の脆弱性

• CVE-2023-4104中 5.5An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitra…
• CVE-2022-0517高 7.8Mozilla VPN can load an OpenSSL configuration file from an unsecured directory. A user or attacker with limited privileges could leverage th…
• CVE-2020-15679高 7.6An OAuth session fixation vulnerability existed in the VPN login flow, where an attacker could craft a custom login URL, convince a VPN user…