CVE & CISA-KEV CatalogNVD
CVE-2025-5264
MEDIUM4.8
CVSS v3
Description
Due to insufficient escaping of the newline character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.
How to fix
Remediation Available
firefoxDebian
Fixed in:139.0-1CVE-2025-5264
firefoxRocky
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
firefoxRed Hat / RHEL
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
firefox-debuginfoRed Hat / RHEL
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
firefox-debuginfoRocky
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el7_9RHSA-2025:9074
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
firefox-debugsourceRocky
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
firefox-debugsourceRed Hat / RHEL
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8341
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_4RHSA-2025:9076
Fixed in:0:128.11.0-1.el8_2RHSA-2025:9075
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el8_6RHSA-2025:9155
Fixed in:0:128.11.0-1.el8_8RHSA-2025:9077
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8308
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
Fixed in:0:128.11.0-1.el9_0RHSA-2025:9073
firefox-x11Red Hat / RHEL
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
firefox-x11Rocky
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_2RHSA-2025:9071
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_4RHSA-2025:9072
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8293
thunderbirdRocky
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
thunderbirdRed Hat / RHEL
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
thunderbird-debuginfoRocky
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
thunderbird-debuginfoRed Hat / RHEL
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
thunderbird-debugsourceRocky
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
thunderbird-debugsourceRed Hat / RHEL
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el10_0RHSA-2025:8608
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_8RHSA-2025:8628
Fixed in:0:128.11.0-1.el8_6RHSA-2025:8629
Fixed in:0:128.11.0-1.el8_4RHSA-2025:8630
Fixed in:0:128.11.0-1.el8_2RHSA-2025:8631
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el8_10RHSA-2025:8756
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_2RHSA-2025:8642
Fixed in:0:128.11.0-1.el9_0RHSA-2025:8598
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
Fixed in:0:128.11.0-1.el9_4RHSA-2025:8599
Fixed in:0:128.11.0-1.el9_6RHSA-2025:8607
thunderbirdUbuntu
Fixed in:1:128.12.0+build1-0ubuntu0.22.04.1USN-7663-1
DeveloperEditionWindows application
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionRequired
ScopeUnchanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityLow
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Exploit Intelligence
0.14%probability of exploitation in 30 days
3rdpercentile
Low risk: more likely to be exploited than 3% of all known CVEs.
References
Vendor Advisory3
Related Vulnerabilities
Other CWE-77 (Command Injection) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2024-3400 | Critical | 10.0 | 100% | KEV + Ransom | - |
| CVE-2024-21887 | Critical | 9.1 | 100% | KEV + Ransom | - |
| CVE-2023-1671 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2023-1389 | High | 8.8 | 100% | KEV | Fix |
| CVE-2021-1498 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2012-1823 | Critical | 9.8 | 100% | KEV | Fix |
Embed a live status badge for CVE-2025-5264
Markdown
[](https://tridentstack.com/cve/CVE-2025-5264)HTML
<a href="https://tridentstack.com/cve/CVE-2025-5264"><img src="https://tridentstack.com/cve/badge/CVE-2025-5264.svg" alt="CVE-2025-5264"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-04-13.