CVE-2025-14861CWE-119

CVE-2025-14861

High · published December 18, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
16.0
In the wild
Unconfirmed
What it is

⚡ Memory safety bugs are lurking in Firefox 146, paving the way for potentially devastating exploits! 🔥 Think of it as a restaurant with a kitchen that never checks its recipes properly. If a rogue chef slips in a dangerous ingredient, it could lead to a disastrous meal — just like how these bugs could let an attacker run arbitrary code without permission! If left unpatched, an attacker could exploit these memory corruption errors to take full control of affected devices. This means they could read sensitive data, install malicious software, or even hijack user sessions — a nightmare for anyone!

Put simply

Think of it as a restaurant with a kitchen that never checks its recipes properly. If a rogue chef slips in a dangerous ingredient, it could lead to a disastrous meal — just like how these bugs could let an attacker run arbitrary code without permission! This vulnerability involves memory corruption issues within Firefox 146 that could allow an attacker to execute arbitrary code on the user's system, effectively bypassing security restrictions.

What to do

If left unpatched, an attacker could exploit these memory corruption errors to take full control of affected devices. This means they could read sensitive data, install malicious software, or even hijack user sessions — a nightmare for anyone! Upgrade to Firefox version 146.0.1 immediately to patch this vulnerability. Additionally, encourage users to regularly check for updates to ensure they're always protected against emerging threats. 🛡️ You've got this! Stay vigilant and keep your Firefox updated for a safe browsing experience! 🚀

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-12-18T20:15Z
Affected products (1)
ProductVersionsFixed in
mozilla/firefox< 146.0.1146.0.1
References (2)
EPSS history
Timeline
  • 18 DEC 14:21Z
    Memory safety bugs fixed in Firefox 146.0.1
    cvelistv5