CVE-2025-4083

Summary

CVE-2025-4083 is a process isolation vulnerability discovered in Thunderbird. The issue arises due to Thunderbird's mishandling of javascript: URIs, leading to content execution in the top-level document's process rather than the intended frame. This potentially enables a sandbox escape, threatening the security of Firefox versions below 138, Firefox ESR below 128.10, Firefox ESR below 115.23, Thunderbird below 138, and Thunderbird below 128.10. The vulnerability stems from the improper handling of these URIs, creating a risk for attackers to bypass intended security restrictions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.