CVE-2025-3035Medium· 5.3▾ SunlitBy first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
0.3% → 0.3%
By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt. This vulnerability was fixed in Firefox 137.
firefox < 137.0Upgrade past the affected range:
firefox 137.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-10859Medium· 4.0Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs
CVE-2025-3033High· 7.7After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded
CVE-2025-3028Medium· 6.5JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free
CVE-2025-1939Low· 3.9Android apps can load web pages using the Custom Tabs feature
CVE-2025-3030High· 8.1Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8
CVE-2025-3031Medium· 6.5An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function