CVE-2025-14332CWE-787

CVE-2025-14332

High · published December 9, 2025

CVSS v3.1
7.3
EPSS
0%
Percentile
22.7
In the wild
Unconfirmed
What it is

⚡ Memory safety bugs in Firefox 145 and Thunderbird 145 could lead to arbitrary code execution—it's like a sneaky guest breaking into a party by tampering with the snacks! 🔥 Think of it as a party where someone could swap out your favorite snack with something dangerous, throwing everything into chaos. If this vulnerability is exploited, an attacker could essentially take control of your system, just like that party crasher taking over the DJ booth and playing unwanted tunes! These memory safety bugs could allow an attacker to run arbitrary code on your system, potentially leading to data theft, system compromise, or worse! The chaos that could ensue is absolutely devastating, leaving your data vulnerable and your system at risk.

Put simply

Think of it as a party where someone could swap out your favorite snack with something dangerous, throwing everything into chaos. If this vulnerability is exploited, an attacker could essentially take control of your system, just like that party crasher taking over the DJ booth and playing unwanted tunes! This vulnerability arises from memory corruption issues in Firefox and Thunderbird versions 145, which, if exploited, could allow attackers to execute arbitrary code. The flaws were addressed in the subsequent releases, fixing the core issues that made exploitation possible.

What to do

These memory safety bugs could allow an attacker to run arbitrary code on your system, potentially leading to data theft, system compromise, or worse! The chaos that could ensue is absolutely devastating, leaving your data vulnerable and your system at risk. Upgrade to Firefox and Thunderbird versions 146 or later immediately to patch these vulnerabilities. It's crucial to ensure that all systems are up to date to prevent any potential exploits. Don't forget to monitor for any unusual activity post-update! You’ve got this! Stay vigilant and keep your systems secure! 🛡️

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00311 · 22.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2025-12-09T21:17Z
Affected products (2)
ProductVersionsFixed in
mozilla/firefox< 146.0146.0
mozilla/thunderbird< 146.0146.0
References (3)
EPSS history
Timeline
  • 09 DEC 13:38Z
    Memory safety bugs fixed in Firefox 146 and Thunderbird 146
    cvelistv5