A same-origin policy bypass vulnerability exists in the Graphics: Canvas2D component, affecting multiple versions of Firefox and Thunderbird. Specifically, it impacts Firefox versions below 142, Firefox ESR versions below 115.27, 128.14, and 140.2, as well as Thunderbird versions below 142, 128.14, and 140.2.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2025-9180 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious web page that leverages the Canvas2D component to bypass the same-origin policy. This requires user interaction, as the victim must visit the malicious page, allowing the attacker to access sensitive data from other origins.
Affected Products
- Firefox < 142: Affected by the same-origin policy bypass in the Canvas2D component.
- Firefox ESR < 115.27: Vulnerable to the same-origin policy bypass.
- Firefox ESR < 128.14: Affected by the vulnerability in the Canvas2D component.
- Firefox ESR < 140.2: Vulnerable to exploitation through the Canvas2D component.
- Thunderbird < 142: Affected by the same-origin policy bypass.
- Thunderbird < 128.14: Vulnerable to the same-origin policy bypass.
- Thunderbird < 140.2: Affected by the vulnerability in the Canvas2D component.
Mitigation
Users are advised to update their Firefox and Thunderbird applications to the latest versions to mitigate this vulnerability. Regularly checking for updates and applying them promptly can help protect against potential exploits.