Critical · published December 9, 2025
🔥 A JIT miscompilation in the JavaScript engine could turn your web experience into a playground for attackers! Think of this vulnerability like a sneaky rogue employee in a bakery who misinterprets orders, leading to disastrous results — one wrong ingredient can spoil the entire batch! If exploited, this could allow an attacker to execute malicious code in the context of a user’s session, potentially leading to data theft or even total system compromise. It’s like giving a burglar the keys to your house, opening the door to unauthorized access!
Think of this vulnerability like a sneaky rogue employee in a bakery who misinterprets orders, leading to disastrous results — one wrong ingredient can spoil the entire batch! This vulnerability arises from a flaw in the Just-In-Time (JIT) compilation process of the JavaScript engine, leading to unexpected behaviors that can be manipulated by attackers.
If exploited, this could allow an attacker to execute malicious code in the context of a user’s session, potentially leading to data theft or even total system compromise. It’s like giving a burglar the keys to your house, opening the door to unauthorized access! Update your Firefox to at least version 146 or Thunderbird to 146 immediately to close this critical gap. Regularly check for updates to ensure you're protected against the latest threats! You've got this! Follow these steps and you'll be on your way to securing your browsing experience! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| mozilla/firefox | < 140.6.0 | 140.6.0 |
| mozilla/firefox | < 146.0 | 146.0 |
| mozilla/thunderbird | < 140.6.0 | 140.6.0 |
| mozilla/thunderbird | < 146.0 | 146.0 |