vulnerability

MFSA2025-56 Firefox: Security Vulnerabilities fixed in Firefox 141 (CVE-2025-8036)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:N)

Published

Jul 22, 2025

Added

Jul 23, 2025

Modified

Apr 15, 2026

Description

Thunderbird cached CORS preflight responses across IP address changes. This allowed circumventing CORS with DNS rebinding. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.

Solution

mozilla-firefox-upgrade-141_0

References

CVE-2025-8036
https://attackerkb.com/topics/CVE-2025-8036
CWE-350
EUVD-EUVD-2025-22369
http://www.mozilla.org/security/announce/2025/mfsa2025-56.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-22369

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report