CVE-2025-1013

CVE-2025-1013 describes a race condition in Mozilla Firefox and Thunderbird that could cause private browsing tabs to open in normal windows, leading to a potential privacy leak. This vulnerability affects Firefox versions prior to 135 and Firefox ESR prior to 128.7, as well as Thunderbird versions prior to 128.7 and 135. Rated Medium severity with a CVSS score of 6.5, this vulnerability is network-exploitable with low attack complexity and no user interaction required, primarily impacting confidentiality and integrity. The primary risk is the exposure of private browsing activity. Currently, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, indicating a low level of public awareness or concern.