CVE-2025-8044CWE-119

CVE-2025-8044

Critical · published July 23, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

🚨 Memory safety bugs lurk in Firefox and Thunderbird versions 140, potentially leaving the door wide open for attackers! 🔥 Imagine a high-security bank vault that has a window left slightly ajar. It’s not broken, but with the right tools and determination, a clever thief could exploit that little gap to get in. That’s what these memory corruption issues are like - a seemingly small oversight with potentially huge consequences! If exploited, hackers could execute arbitrary code, which means they could take control of users' systems, access sensitive data, or disrupt services, making this a critical threat. Just think of it: your browser or email client could be turned into a weapon against you without any warning!

Put simply

Imagine a high-security bank vault that has a window left slightly ajar. It’s not broken, but with the right tools and determination, a clever thief could exploit that little gap to get in. That’s what these memory corruption issues are like - a seemingly small oversight with potentially huge consequences! This vulnerability stems from memory safety flaws in Firefox and Thunderbird that could lead to memory corruption, allowing attackers to run malicious code under certain conditions. The risk is heightened because these applications are widely used, and many users might not be aware of the dangers lurking beneath the surface.

What to do

If exploited, hackers could execute arbitrary code, which means they could take control of users' systems, access sensitive data, or disrupt services, making this a critical threat. Just think of it: your browser or email client could be turned into a weapon against you without any warning! Update immediately to Firefox and Thunderbird versions 141 to patch these vulnerabilities. Encourage users to regularly check for updates and enable automatic updates to stay protected in the future. Make sure to inform your teams about these risks to ensure safe browsing habits. You've got this! By staying proactive and keeping your software updated, you can protect yourself and your data! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-07-23T01:15Z
Affected products (2)
ProductVersionsFixed in
mozilla/firefox< 141.0141.0
mozilla/thunderbird< 141.0141.0
References (3)
EPSS history
Timeline
  • 22 JUL 20:49Z
    Memory safety bugs fixed in Firefox 141 and Thunderbird 141
    cvelistv5