CVE-2025-1935

Description

References

• bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
• mozilla.org/security/advisories/mfsa2025-14 · Vendor Advisory
• mozilla.org/security/advisories/mfsa2025-16 · Vendor Advisory
• mozilla.org/security/advisories/mfsa2025-17 · Vendor Advisory
• mozilla.org/security/advisories/mfsa2025-18 · Vendor Advisory
• lists.debian.org/debian-lts-announce/2025/03/msg00006.html

firefox의 다른 취약점

• CVE-2026-106016심각 9.8Mitigation bypass in the File Handling component. This vulnerability was fixed in Firefox 157.0.1 and Thunderbird 158.
• CVE-2026-96869보통 4.3Information disclosure in the Networking component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, …
• CVE-2026-100832높음 8.8Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4…
• CVE-2026-100831높음 8.8Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunder…
• CVE-2026-100830높음 8.1Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, a…