CVE-2025-3033

Published: 2025-04-01T13:15Z

Last Modified: 2025-04-07T13:30Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

After selecting a malicious Windows `.url` shortcut from the local filesystem, an unexpected file could be uploaded. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 137 and Thunderbird < 137. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt