https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:01:15.128100+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-5265 CVE-2025-5265 — Potential local code execution in “Copy as cURL” command 2026-10-06T17:01:15.143939+00:00

Affected: Mozilla Firefox, Mozilla Thunderbird

Due to insufficient escaping of the ampersand character in the “Copy as cURL” feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. *This bug only affects Firefox for Windows. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 139, Firefox ESR 115.24, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.