CVE-2025-5270 — SNI was sometimes unencrypted
In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139.
Published: 2025-05-27 · CVSS: 7.5 · CVSS 3.1
In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7