References https://nvd.nist.gov/vuln/detail/CVE-2025-4083 https://www.mozilla.org/en-US/security/advisories/mfsa2025-31/ https://access.redhat.com/security/cve/CVE-2025-4083 https://www.tenable.com/cve/CVE-2025-4083 https://cve.circl.lu/cve/CVE-2025-4083 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2025-4083 https://www.suse.com/security/cve/CVE-2025-4083.html https://ubuntu.com/security/CVE-2025-4083 https://www.sentinelone.com/vulnerability-database/cve-2025-4083/ https://www.ameeba.com/blog/cve-2025-4083-process-isolation-vulnerability-in-thunderbird-and-firefox-due-to-improper-handling-of-javascript-uris/
Related Vulnerabilities(CVE-2025-4087)Firefox和Thunderbird XPath解析空值检查不足导致内存损坏漏洞(CVE-2025-4082)macOS版Firefox和Thunderbird WebGL着色器越界读取漏洞可导致权限提升(CVE-2025-3034)Firefox和Thunderbird内存安全漏洞可导致任意代码执行Mozilla Firefox WebExtensions SettingContent-ms策略绕过漏洞Mozilla Firefox CVE-2022-26485 XSLT 进程释放后重利用漏洞Mozilla多个产品越界写入漏洞(CVE-2022-28281)Mozilla多个产品内存释放后再次引用漏洞(CVE-2022-28282)Mozilla多个产品UI 层渲染不当漏洞(CVE-2022-28286)Mozilla多个产品越界读取漏洞(CVE-2022-28285)Mozilla Firefox 安全漏洞Mozilla Thunderbird、Firefox ESR和Firefox 缓冲区错误漏洞(CVE-2020-6831)Mozilla Firefox 注入漏洞Mozilla Firefox/Firefox ESR远程内存破坏及缓冲区溢出安全漏洞