CVE-2025-5267: Clickjacking vulnerability could have led to leaking saved payment card details
A clickjacking vulnerability could have been used to trick a user into leaking saved payment card details to a malicious page.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2025-5267?
CVE-2025-5267 is classified as a high severity vulnerability due to its potential to expose sensitive payment card details.
How do I fix CVE-2025-5267?
To fix CVE-2025-5267, update Firefox to version 139 or Firefox ESR to version 128.11 or later.
What types of software are affected by CVE-2025-5267?
CVE-2025-5267 affects Mozilla Firefox versions earlier than 139 and Mozilla Firefox ESR versions earlier than 128.11.
What does CVE-2025-5267 exploit?
CVE-2025-5267 exploits a clickjacking vulnerability to trick users into leaking their saved payment card information.
Are there any workarounds for CVE-2025-5267?
There are no effective workarounds for CVE-2025-5267, so updating to a secure version is strongly recommended.