8.1
High
CVE-2025-13018 Mitigation bypass in the DOM: Security component
Description
Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Thunderbird 145, and Thunderbird 140.5.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox 145 | earliest → < 145 | 145 |
| Firefox 140.5 | earliest → < 140.5 | 140.5 |
| Firefox ESR 140.5 | earliest → < 140.5 | 140.5 |
| Thunderbird 145 | earliest → < 145 | 145 |
| Thunderbird 140.5 | earliest → < 140.5 | 140.5 |