CVE-2025-10536: Vulnerability in Mozilla Firefox
Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.
AI Analysis
Technical Summary
This vulnerability involves information disclosure within the Networking: Cache component of Mozilla Firefox. It was reported by Ibuki Sato and is tracked as CVE-2025-10536. The issue was fixed in Firefox 143 and Firefox ESR 140.3 releases. The CVSS 3.1 base score is 6.2, with vector AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating local attack vector with low complexity, no privileges or user interaction required, and high impact on confidentiality. The vendor advisory confirms the fix and references Bug 1981502. No known exploits have been reported in the wild.
Potential Impact
Successful exploitation of this vulnerability could lead to unauthorized disclosure of information from the Networking: Cache component, potentially exposing sensitive data. The impact is limited to confidentiality with no integrity or availability effects. Given the medium CVSS score and the nature of the flaw, the risk is moderate but should be addressed promptly.
Mitigation Recommendations
Mozilla has released official fixes for this vulnerability in Firefox 143 and Firefox ESR 140.3. Users and administrators should update to these versions or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
CVE-2025-10536: Vulnerability in Mozilla Firefox
Description
Information disclosure in the Networking: Cache component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability involves information disclosure within the Networking: Cache component of Mozilla Firefox. It was reported by Ibuki Sato and is tracked as CVE-2025-10536. The issue was fixed in Firefox 143 and Firefox ESR 140.3 releases. The CVSS 3.1 base score is 6.2, with vector AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, indicating local attack vector with low complexity, no privileges or user interaction required, and high impact on confidentiality. The vendor advisory confirms the fix and references Bug 1981502. No known exploits have been reported in the wild.
Potential Impact
Successful exploitation of this vulnerability could lead to unauthorized disclosure of information from the Networking: Cache component, potentially exposing sensitive data. The impact is limited to confidentiality with no integrity or availability effects. Given the medium CVSS score and the nature of the flaw, the risk is moderate but should be addressed promptly.
Mitigation Recommendations
Mozilla has released official fixes for this vulnerability in Firefox 143 and Firefox ESR 140.3. Users and administrators should update to these versions or later to remediate the issue. No additional mitigation steps are indicated by the vendor advisory.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- mozilla
- Date Reserved
- 2025-09-16T06:48:50.429Z
- Cvss Version
- null
- State
- PUBLISHED
Threat ID: 68c958bfff7c553b3ddd1f05
Added to database: 9/16/2025, 12:31:59 PM
Last enriched: 4/14/2026, 11:34:24 AM
Last updated: 5/10/2026, 2:29:37 AM
Views: 93
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.