Back to search
CVE-2025-5267
Published: May 27, 2025
Modified: Apr 13, 2026
PUBLISHED
Description
A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability was fixed in Firefox 139, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Firefox | unaffected 128.11 - <= 128.*unaffected 139 - <= * |
Mozilla | Thunderbird | unaffected 128.11 - <= 128.*unaffected 139 - <= * |
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now