CVE-2025-6434 | Mozilla Firefox up to 139 HTTPS-Only Feature clickjacking

June 24, 2025 Yanac

A vulnerability, which was classified as problematic, was found in Mozilla Firefox up to 139. This affects an unknown part of the component HTTPS-Only Feature. The manipulation leads to clickjacking.

This vulnerability is uniquely identified as CVE-2025-6434. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More