VDB

WID-SEC-W-2025-2566

WID-SEC-W-2025-2566 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from circl · Published November 11, 2025

Firefox ist ein Open-Source-Webbrowser. ESR ist die Variante mit verlängertem Support.

Risk scores

CVSS 4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

VendorProductVersions
Ubuntu Linux
Mozilla Thunderbird 140.5
Mozilla Firefox <145
SUSE Linux
IGEL OS 12
Mozilla Firefox ESR 140.5
Mozilla Firefox 145
SUSE openSUSE
Red Hat Enterprise Linux
RESF Rocky Linux
Mozilla Thunderbird <140.5
Mozilla Firefox ESR <140.5
Mozilla Thunderbird 145
Debian Linux
IGEL OS 11
Oracle Linux
Mozilla Thunderbird <145
Mozilla Firefox ESR <115.30
Amazon Linux 2
Mozilla Firefox ESR 115.30

Timeline

  • Nov 11, 2025 CVE Published
  • Jun 15, 2026 CVE Updated
  • Nov 1, 2026 Distribution Patch (26 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln WID-SEC-W-2025-2566
vulnetix vdb fixes WID-SEC-W-2025-2566

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/WID-SEC-W-2025-2566/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

Look up in the Resolve Platform →
$ Lookup Community · 50/day Open Lookup ›