CVE-2025-2817
EUVD-2025-1268929.04.2025, 14:15
Thunderbird's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. This vulnerability was fixed in Firefox 138, Firefox ESR 128.10, Firefox ESR 115.23, Thunderbird 138, and Thunderbird 128.10.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| mozilla | firefox_esr | 𝑥 < 115.23.0 |
| mozilla | firefox | 𝑥 < 138.0 |
| mozilla | firefox_esr | 116.0 ≤ 𝑥 < 128.10.0 |
| mozilla | thunderbird | 𝑥 < 128.10.0 |
| mozilla | thunderbird | 129.0 ≤ 𝑥 < 138.0 |
𝑥
= Vulnerable software versions
Debian Releases
Debian Product | |||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| firefox |
| ||||||||||||||||
| firefox-esr |
| ||||||||||||||||
| thunderbird |
|
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| MozillaFirefox |
| ||||||||||||||||||||||||
| MozillaFirefox-devel |
| ||||||||||||||||||||||||
| MozillaFirefox-translations-common |
| ||||||||||||||||||||||||
| MozillaFirefox-translations-other |
| ||||||||||||||||||||||||
| MozillaThunderbird |
| ||||||||||||||||||||||||
| MozillaThunderbird-translations-common |
| ||||||||||||||||||||||||
| MozillaThunderbird-translations-other |
|
Red Hat Enterprise Linux Releases
References