CVE-2025-13027CWE-119

CVE-2025-13027

High · published November 11, 2025

CVSS v3.1
8.1
EPSS
0%
Percentile
28.1
In the wild
Unconfirmed
What it is

⚡ Memory safety bugs are lurking in Firefox 144 and Thunderbird 144! These pesky issues could lead to arbitrary code execution if someone put their mind to it. 🔥 Think of it like a leaky faucet in your plumbing system — if left unattended, it could cause a flood! Similarly, these memory corruption bugs might allow an attacker to take control and run whatever code they want, creating chaos in your browser or email client. If an attacker takes advantage of these memory safety bugs, they could potentially run any code on your system, leading to unauthorized access, data breaches, or even complete system takeover! This could be absolutely devastating, especially for those who handle sensitive information.

Put simply

Think of it like a leaky faucet in your plumbing system — if left unattended, it could cause a flood! Similarly, these memory corruption bugs might allow an attacker to take control and run whatever code they want, creating chaos in your browser or email client. The memory safety vulnerabilities in Firefox 144 and Thunderbird 144 stem from flaws in how the applications manage memory, allowing an attacker to corrupt memory and execute arbitrary code. This kind of exploitation typically requires advanced techniques, but the underlying risk is significant.

What to do

If an attacker takes advantage of these memory safety bugs, they could potentially run any code on your system, leading to unauthorized access, data breaches, or even complete system takeover! This could be absolutely devastating, especially for those who handle sensitive information. Immediately update to Firefox and Thunderbird 145 to patch these vulnerabilities! Additionally, ensure that all your applications are set to auto-update so you can stay ahead of any future issues. You've got this! Follow these steps, and you'll have your security hero cape on in no time! 🛡️

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00356 · 28.1th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-11-11T21:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox< 145.0145.0
References (3)
EPSS history
Timeline
  • 11 NOV 15:47Z
    Memory safety bugs fixed in Firefox 145 and Thunderbird 145
    cvelistv5