Permissions, Privileges, and Access Controls in Mozilla products - CVE-2025-11711

Detailed vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to application does not properly impose security restrictions, which allows an malicious web application to modify JavaScript Object properties that were supposed to be non-writable. A remote attacker can trick the victim into visiting a specially crafted website and execute arbitrary code on the system.

How to mitigate CVE-2025-11711

Sources

• https://www.mozilla.org/en-US/security/advisories/mfsa2025-82/
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-83/
• https://www.mozilla.org/en-US/security/advisories/mfsa2025-81/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1989978