VDB
CVE-2025-55029
CVE-2025-55029
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support. Thunderbird ist ein Open Source E-Mail Client.
EPSS 0.34% · 26.3th percentile
Risk Scores
CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS Score
0.34%
26.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Amazon | Amazon Linux 2 | |
| Mozilla | Mozilla Thunderbird <128.14 | |
| IGEL | IGEL OS | |
| Mozilla | Mozilla Firefox ESR <115.27 | |
| Mozilla | Mozilla Firefox ESR <140.2 | |
| Ubuntu | Ubuntu Linux | |
| SUSE | SUSE Linux | |
| Oracle | Oracle Linux | |
| Mozilla | Mozilla Firefox ESR <128.14 | |
| Mozilla | Mozilla Firefox <142 | |
| Debian | Debian Linux | |
| Mozilla | Mozilla Thunderbird <142 | |
| SUSE | SUSE openSUSE | |
| RESF | RESF Rocky Linux | |
| Mozilla | Mozilla Thunderbird <140.2 | |
| Mozilla | Mozilla Firefox iOS <142 | |
| Red Hat | Red Hat Enterprise Linux |
Timeline
- Aug 19, 2025 CVE Published
- Aug 19, 2025 PoC Published
- Aug 20, 2025 EPSS Score
- Aug 20, 2025 Coalition ESS Score
- Aug 21, 2025 Coalition ESS Score
- Aug 22, 2025 Coalition ESS Score
- Aug 26, 2025 Coalition ESS Score
- Aug 28, 2025 EPSS Score
- Sep 5, 2025 EPSS Score
- Sep 13, 2025 EPSS Score
- Sep 21, 2025 EPSS Score
- Sep 29, 2025 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1866.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1866 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-64/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-65/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-66/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-67/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-68/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-69/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-70/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-71/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2025-72/ advisory
- https://lists.debian.org/debian-security-announce/2025/msg00144.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/7ZG3O2VY7KOKS72KN6VW4LMQYP2C6RLE/ advisory
- https://lists.debian.org/debian-lts-announce/2025/08/msg00016.html advisory
- https://lists.debian.org/debian-security-announce/2025/msg00148.html advisory
- https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CYYOHEMZQQSD7I3AJFGAMV3O3PPYP2MS/ advisory
- https://lists.debian.org/debian-lts-announce/2025/08/msg00018.html advisory
- https://access.redhat.com/errata/RHSA-2025:14416 advisory
- https://access.redhat.com/errata/RHSA-2025:14417 advisory
- https://access.redhat.com/errata/RHSA-2025:14442 advisory
…and 52 more