Critical · published November 11, 2025
🔥 A critical JIT miscompilation vulnerability lurks in the JavaScript engine of Firefox and Thunderbird—like a magician pulling off a disappearing act, but with your data! Think of this issue as a library that accidentally misfiles books, causing readers to check out an entirely different story than intended. In this case, the JIT engine is misinterpreting code, leading to unexpected results which could expose sensitive information. If exploited, this vulnerability could allow attackers to execute arbitrary code, potentially leading to data theft, system crashes, or unauthorized access to sensitive information. With a CVSS score of 9.8, the stakes are high—this could have absolutely devastating consequences for users.
Think of this issue as a library that accidentally misfiles books, causing readers to check out an entirely different story than intended. In this case, the JIT engine is misinterpreting code, leading to unexpected results which could expose sensitive information. The flaw in the Just-In-Time (JIT) compilation process allows for unexpected code execution due to how the JavaScript engine handles certain scripts. This miscompilation can lead to security violations, as the engine runs code that should never be executed.
If exploited, this vulnerability could allow attackers to execute arbitrary code, potentially leading to data theft, system crashes, or unauthorized access to sensitive information. With a CVSS score of 9.8, the stakes are high—this could have absolutely devastating consequences for users. To protect yourself, update Firefox and Thunderbird to versions 145 or later immediately. Additionally, encourage users to regularly check for updates to ensure they’re running the latest and most secure versions of their browsers. You've got this! By following these steps, you can lock down your system and keep it safe from this critical vulnerability. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 145.0 | 145.0 |