VDB
DEBIAN-CVE-2025-14327
DEBIAN-CVE-2025-14327
PUBLISHED
CVSS 7.5 HIGH
Spoofing issue in the Downloads Panel component. This vulnerability was fixed in Firefox 146, Thunderbird 146, Firefox ESR 140.7, and Thunderbird 140.7.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:14 | thunderbird | 1:128.13.0esr-1, 1:140.6.0esr-1~deb12u1, 1:140.6.0esr-1~deb11u1 |
| Debian:14 | firefox-esr | 140.7.0esr-1~deb12u1, 140.7.0esr-1~deb11u1, 140.6.0esr-1~deb13u1 |
| Debian:12 | thunderbird | 1:115.5.0-1, 1:115.5.0-1~deb10u1, 1:115.5.0-1~deb11u1 |
| Debian:13 | firefox-esr | 140.3.0esr-1~deb11u1, 140.3.0esr-1, 128.14.0esr-1~deb13u1 |
| Debian:13 | thunderbird | 1:140.2.0esr-1, 1:140.1.1esr-1, 1:140.1.0esr-1 |
| Debian:12 | firefox-esr | 115.7.0esr-1~deb12u1, 115.8.0esr-1, 115.8.0esr-1~deb10u1 |
Timeline
- Dec 9, 2025 CVE Published
- Oct 8, 2026 CVE Updated