We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Script elements loading cross-origin resources generated load and error events which leaked information enabling XS-Leaks attacks. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.
Reserved 2025-05-27 | Published 2025-05-27 | Updated 2025-05-27 | Assigner mozillaScript element events leaked cross-origin resource status
Jakub Szymsza
bugzilla.mozilla.org/show_bug.cgi?id=1965628
www.mozilla.org/security/advisories/mfsa2025-42/
www.mozilla.org/security/advisories/mfsa2025-44/
Support options
