CVE-2025-3035: Tab title disclosure across pages when using AI chatbot
By first using the AI chatbot in one tab and later activating it in another tab, the document title of the previous tab would leak into the chat prompt.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-3035?
CVE-2025-3035 has been assessed as a potential information disclosure vulnerability, which can lead to sensitive document titles being leaked.
How do I fix CVE-2025-3035?
To mitigate CVE-2025-3035, update Firefox to version 138 or later, where the vulnerability has been addressed.
What types of software are affected by CVE-2025-3035?
CVE-2025-3035 specifically affects Mozilla Firefox versions up to 137.
What are the potential risks associated with CVE-2025-3035?
The primary risk of CVE-2025-3035 is that it may unintentionally expose document titles to other users if the chat functionality is misused.
Can CVE-2025-3035 be exploited remotely?
CVE-2025-3035 does not appear to be exploitable remotely, as it requires user interaction within the same browsing session.