Security Advisory

CVE-2025-5270

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-05-27 12:29:28

Last updated 2026-04-13 14:30:47

Assigner mozilla

CVSS score not scored

State PUBLISHED

Description

In certain cases, SNI could have been sent unencrypted even when encrypted DNS was enabled. This vulnerability was fixed in Firefox 139 and Thunderbird 139.

← Browse all CVEs View on cve.org ↗