Vulnerability details

CVE-2025-8039

Search terms persisted in URL bar

CVSS 3.1
8.1High

Official description

In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.

CVSS scores

ScoreVersionSourceVector
8.1High 3.1 CISA ADP / Vulnrichment (CISA-ADP) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Affected products

VendorProductVersionsSource
No product information recorded.

References and advisories

5
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-07-23
Last updated
2026-07-29
State
Published
Assigner (CNA)
mozilla

Exploit prediction (EPSS)

0.34%
Probability of exploitation in 30 days
27.6%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Total

Weaknesses (CWE)

  • CWE-200
    Exposure of Sensitive Information to an Unauthorized Actor