CVE-2025-4085 — Potential information leakage and privilege escalation in UITour actor
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability w…
Published: 2025-04-29 · CVSS: 7.1 · CVSS 3.1
An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 and Thunderbird 138.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7