CVE-2025-3839

HIGH

8.0

Description

A flaw was found in Epiphany, a tool that allows websites to open external URL handler applications with minimal user interaction. This design can be misused to exploit vulnerabilities within those handlers, making them appear remotely exploitable. The browser fails to properly warn or gate this action, resulting in potential code execution on the client device via trusted UI behavior.

Details CVE

Score CVSS v3.18.0

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

Vecteur d'attaqueNETWORK

ComplexiteHIGH

Privileges requisNONE

Interaction utilisateurREQUIRED

Publie1/23/2026

Derniere modification1/26/2026

Sourcenvd

Observations honeypot0

Faiblesses (CWE)

CWE-356

References

https://access.redhat.com/security/cve/CVE-2025-3839(patrick@puiterwijk.org)

https://bugzilla.redhat.com/show_bug.cgi?id=2361430(patrick@puiterwijk.org)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.