WID-SEC-W-2025-2074

WID-SEC-W-2025-2074 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from circl · Published September 16, 2025

Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support. Thunderbird ist ein Open Source E-Mail Client.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Vendor	Product	Versions
	Oracle Linux
	Red Hat Enterprise Linux
	Amazon Linux 2
	Mozilla Firefox <143
	Mozilla Thunderbird <143
	Mozilla Firefox ESR 115.28
	RESF Rocky Linux
	Mozilla Firefox 143
	Mozilla Thunderbird 143
	Mozilla Thunderbird <140.3
	Mozilla Firefox ESR 140.3
	SUSE openSUSE
	Mozilla Firefox ESR <115.28
	Debian Linux
	Mozilla Thunderbird 140.3
	Mozilla Firefox ESR <140.3
	Ubuntu Linux
	SUSE Linux

Timeline

Sep 16, 2025 CVE Published
Jun 15, 2026 CVE Updated
Oct 31, 2026 Distribution Patch (22 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln WID-SEC-W-2025-2074
vulnetix vdb fixes WID-SEC-W-2025-2074

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/WID-SEC-W-2025-2074/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 36 more

Look up in the Resolve Platform →