CVE-2025-8039High· 8.1▾ TwilightIn some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.3%
Last analysed / modified upstream
0.3% → 0.3%
In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
firefox < 140.1firefox < 141.0thunderbird < 140.1thunderbird < 141.0Upgrade past the affected range:
firefox 141.0thunderbird 141.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-3031Medium· 6.5An attacker could read 32 bits of values spilled onto the stack in a JIT compiled function
CVE-2025-11717Critical· 9.1When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used
CVE-2025-10535High· 7.5Information disclosure, mitigation bypass in the Privacy component in Firefox for Android
CVE-2026-118008High· 8.8Privilege escalation in the DOM: Navigation component
CVE-2026-117999NoneRace condition in the IPC component
CVE-2026-117976NoneSite isolation issue in the DOM: Navigation component