CVE-2025-8039High· 8.1▾ TwilightIn some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.3%
In some cases search terms persisted in the URL bar even after navigating away from the search page. This vulnerability was fixed in Firefox 141, Firefox ESR 140.1, Thunderbird 141, and Thunderbird 140.1.
firefox < 140.1firefox < 141.0thunderbird < 140.1thunderbird < 141.0Upgrade past the affected range:
firefox 141.0thunderbird 141.0Connected by shared product, vendor, weakness, or advisory.
CVE-2026-96869Medium· 4.3Information disclosure in the Networking component
CVE-2026-100766Medium· 4.3Information disclosure in the Networking: JAR component
CVE-2026-92070Medium· 4.3Information disclosure in the Networking component
CVE-2026-8706Medium· 6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the response rendered with the signed-in user's cookies
CVE-2026-8967High· 7.5Information disclosure in the Graphics: WebGPU component
CVE-2026-8966High· 7.5Information disclosure in the IP Protection component