Vulnerability Bulletins

CVE-2025-8042

   
Affected software ANDROID
 
Firefox for Android allowed a sandboxed iframe without the `allow-downloads` attribute to start downloads. This vulnerability affects Firefox < 141.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-8042