CVE-2025-8364— Mozilla Firefox for Android 安全漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2025-8364の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Address bar spoofing using an blob URI on Firefox for Android
ソース: NVD (National Vulnerability Database)
脆弱性説明
A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed in Firefox 141.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Mozilla Firefox for Android 安全漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Mozilla Firefox for Android是美国Mozilla基金会的一款针对Android设备设计的网页浏览器。 Mozilla Firefox for Android 141之前版本存在安全漏洞，该漏洞源于blob:URI可能隐藏页面真实来源，导致欺骗攻击。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
II. CVE-2025-8364の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2025-8364のインテリジェンス情報
请登录查看更多情报信息。
Same Patch Batch · Mozilla · 2025-08-19 · 21 CVEs total
| CVE-2025-8042 | Sandboxed iframe could start downloads | |
| CVE-2025-55033 | Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorr | |
| CVE-2025-55032 | Focus incorrectly ignores Content-Disposition headers for some MIME types | |
| CVE-2025-55029 | Malicious scripts could spam popups for denial of service attacks | |
| CVE-2025-55031 | Passkey phishing within Bluetooth range | |
| CVE-2025-55028 | JavaScript alerts could impede UI interaction or allow denial of service attacks | |
| CVE-2025-55030 | Content-Disposition headers incorrectly ignored for some MIME types | |
| CVE-2025-54144 | Internal Firefox open-text URL scheme allowed loading of arbitrary URLs | |
| CVE-2025-54145 | Scanning a malicious URL utilizing Firefox's open-text scheme with the QR code scanner cou | |
| CVE-2025-54143 | Sandboxed iframes could allow local downloads despite sandbox restrictions | |
| CVE-2025-9179 | Sandbox escape due to invalid pointer in the Audio/Video: GMP component | |
| CVE-2025-8041 | Incorrect URL truncation in Firefox for Android | |
| CVE-2025-9184 | Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thun | |
| CVE-2025-9187 | Memory safety bugs fixed in Firefox 142 and Thunderbird 142 | |
| CVE-2025-9182 | Denial-of-service due to out-of-memory in the Graphics: WebRender component | |
| CVE-2025-9183 | Spoofing issue in the Address Bar component | |
| CVE-2025-9185 | Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14 | |
| CVE-2025-9186 | Spoofing issue in the Address Bar component of Firefox Focus for Android | |
| CVE-2025-9180 | Same-origin policy bypass in the Graphics: Canvas2D component | |
| CVE-2025-9181 | Uninitialized memory in the JavaScript Engine component |
IV. 関連脆弱性
同じ製品: Firefox
- CVE-2026-8093
Memory safety bugs fixed in Thunderbird 150.0.2 - CVE-2026-8094
Other issue in the WebRTC component - CVE-2026-8092
Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thu - CVE-2026-8091
Incorrect boundary conditions in the Audio/Video: Playback c - CVE-2026-8090
Use-after-free in the DOM: Networking component
同じベンダー: Mozilla
- CVE-2026-8093
Memory safety bugs fixed in Thunderbird 150.0.2 - CVE-2026-8094
Other issue in the WebRTC component - CVE-2026-8092
Memory safety bugs fixed in Thunderbird ESR 140.10.2 and Thu - CVE-2026-8091
Incorrect boundary conditions in the Audio/Video: Playback c - CVE-2026-8090
Use-after-free in the DOM: Networking component
V. CVE-2025-8364へのコメント
まだコメントはありません