vulnerability

FreeBSD: VID-4a357f4b-685e-11f0-a12d-b42e991fc52e (CVE-2025-8032): Mozilla -- XSLT document CSP bypass

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:N)

Published

Jul 24, 2025

Added

Jul 25, 2025

Modified

Jun 15, 2026

Description

XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.

Solutions

freebsd-upgrade-package-firefoxfreebsd-upgrade-package-firefox-esrfreebsd-upgrade-package-thunderbirdfreebsd-upgrade-package-thunderbird-esr

References

CVE-2025-8032
https://attackerkb.com/topics/CVE-2025-8032
CWE-693
EUVD-EUVD-2025-22365
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22365

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report