CVE-2025-5267

Description

A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page. This vulnerability affects Firefox < 139 and Firefox ESR < 128.11.

Reserved 2025-05-27 | Published 2025-05-27 | Updated 2025-05-27 | Assigner mozilla

Problem types

Clickjacking vulnerability could have led to leaking saved payment card details

Product status

Any version before 139
affected

Any version before 128.11
affected

Credits

Ameen Basha M K

References

bugzilla.mozilla.org/show_bug.cgi?id=1954137

www.mozilla.org/security/advisories/mfsa2025-42/

www.mozilla.org/security/advisories/mfsa2025-44/

cve.org (CVE-2025-5267)

nvd.nist.gov (CVE-2025-5267)

Download JSON