CVE-2025-14333High· 8.1▾ TwilightMemory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploit…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 44.6 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 30.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.4%
Last analysed / modified upstream
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
firefox < 140.6.0firefox < 146.0thunderbird < 140.6.0thunderbird < 146.0Upgrade past the affected range:
firefox 146.0thunderbird 146.0Connected by shared product, vendor, weakness, or advisory.
CVE-2025-14330Critical· 9.8JIT miscompilation in the JavaScript Engine: JIT component
CVE-2025-14328High· 8.8Privilege escalation in the Netmonitor component
CVE-2025-14329High· 8.8Privilege escalation in the Netmonitor component
CVE-2025-14324Critical· 9.8JIT miscompilation in the JavaScript Engine: JIT component
CVE-2025-14321Critical· 9.8Use-after-free in the WebRTC: Signaling component
CVE-2025-14331Medium· 6.5Same-origin policy bypass in the Request Handling component