WID-SEC-W-2025-2812

WID-SEC-W-2025-2812 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from circl · Published December 9, 2025

Firefox ist ein Open Source Web Browser. ESR ist die Variante mit verlängertem Support.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Vendor	Product	Versions
	Amazon Linux 2
	SUSE Linux
	SUSE openSUSE
	Mozilla Firefox ESR <115.31
	RESF Rocky Linux
	Mozilla Thunderbird 146
	Mozilla Thunderbird 140.6
	Ubuntu Linux
	Mozilla Firefox ESR 115.31
	Oracle Linux
	Mozilla Firefox ESR <140.6
	Red Hat Enterprise Linux
	Mozilla Firefox <146
	Debian Linux
	Mozilla Firefox ESR 140.6
	Mozilla Thunderbird <146
	Mozilla Firefox 146
	Mozilla Thunderbird <140.6

Timeline

Dec 9, 2025 CVE Published
Feb 4, 2026 CVE Updated
Apr 30, 2026 Distribution Patch (38 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln WID-SEC-W-2025-2812
vulnetix vdb fixes WID-SEC-W-2025-2812

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/WID-SEC-W-2025-2812/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 61 more

Look up in the Resolve Platform →