CNNVD-202506-1595 Information

CNNVD ID

CNNVD-202506-1595

CVE-2025-5687

  • CNNVD Published: 2025-06-11

Description (Chinese)

Mozilla VPN是美国Mozilla基金会的开源虚拟专用网络Web浏览器扩展,桌面应用程序和移动应用程序。 Mozilla VPN 2.28.0之前版本存在安全漏洞,该漏洞源于权限提升,可能导致root访问。

Description (English)

Mozilla VPN is an extension of the Web browser, desktop and mobile applications of the United States Mozilla Foundation ’ s open-source virtual private network. There was a security loophole in the previous version of Mozilla VPN 2.28.0, which stemmed from an increase in authority, which could lead to root access.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Mozilla

Published

2025-06-11

Last Modified

2026-02-24

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1953736 https://www.mozilla.org/security/advisories/mfsa2025-48/ https://nvd.nist.gov/vuln/detail/CVE-2025-5687

Patch

https://www.mozilla.org/zh-CN/products/vpn/download/

Share on: