VULNERABILITY INTELLIGENCE

CVE-2025-8364

CVSS score4.3 MEDIUM
EPSS probability0.23%
CISA KEVNot currently listed
Published2025-08-19
Last modified2026-10-05
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 141.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-451

Primary references