CVE-2025-10529 is a same-origin policy bypass vulnerability in the Layout component affecting Firefox versions prior to 143 and Firefox ESR prior to 140.3, as well as Thunderbird versions prior to 143 and Thunderbird ESR prior to 140.3. This vulnerability is part of a set of security issues fixed in these releases. The vulnerability has a moderate impact and is addressed by official patches released by Mozilla.