CVE-2025-0245

EUVD-2025-1577
Under certain circumstances, a user opt-in setting that Focus should require authentication before use could have been be bypassed. This vulnerability was fixed in Firefox 134.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
mozillaCNA
3.3 LOW
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 19.87%
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mozillafirefox
𝑥
< 134.0
CNA
Debian logo
Debian Releases
Debian Product
Codename
firefox
sid
158.0-1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
firefox
focal
dne
jammy
not-affected
noble
not-affected
oracular
not-affected
thunderbird
focal
dne
jammy
not-affected
noble
not-affected
oracular
not-affected
References
https://bugzilla.mozilla.org/show_bug.cgi?id=1895342
https://www.mozilla.org/security/advisories/mfsa2025-01/