CVE-2025-4085 — An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. This vulnerability was fixed in Firefox 138 — CVE Database · The Intelligence Room