CVE-2025-11716 · Brief

CVEs like CVE-2025-11716

The records whose text reads closest to CVE-2025-11716, in the order Forge ranked them. The number on each row is Forge's similarity score. The reason under each row uses held facts only.

1. CVE-2026-706120.736
   Electron: Sandboxed iframes can launch external protocol handlers

   Same weakness class, CWE-284 (access control failure).

2. CVE-2023-295400.735
   Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to external protocol links in…

   Same vendor or product family, Mozilla.

3. CVE-2021-239570.734
   Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox.

   Same vendor or product family, Mozilla.

4. CVE-2014-15520.730
   Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properly implement the sandbox attribute of the IFRAME…

   Same vendor or product family, Mozilla.

5. CVE-2026-706080.653
   Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

   Close in meaning. The records share no weakness class, product family or exploited-list entry we hold.

6. CVE-2025-64310.748
   The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed

   Related weakness classes, CWE-284 is above CWE-285; same vendor or product family, Mozilla.

7. CVE-2022-344740.706
   Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect…

   Same vendor or product family, Mozilla.

8. CVE-2022-227590.694
   If a document created a sandboxed iframe without <code>allow-scripts</code>, and subsequently appended an element to…

   Same vendor or product family, Mozilla.

9. CVE-2013-56140.702
   Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME…

   Same vendor or product family, Mozilla.

10. CVE-2022-263840.714
    If an attacker could control the contents of an iframe sandboxed with <code>allow-popups</code> but not…

    Same vendor or product family, Mozilla.

computed Similarity is computed, not recorded. Model Forge pro. Drawn from 396,902 records. Fetched 2026-11-01.