CVE-2025-9187CWE-119

CVE-2025-9187

Critical · published August 20, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

🚨 Memory safety bugs are lurking in Firefox 141 and Thunderbird 141, making it alarmingly easy for attackers to run arbitrary code! 🔥 Think of it like a restaurant kitchen where a chef accidentally leaves an ingredient off the orders slip — without proper oversight, someone could slip in any random item they want, ruining the dish. 🥘 The consequences are absolutely devastating: an attacker could potentially take control of your system, accessing sensitive data, installing malware, or wreaking havoc in your environment. It’s like giving a total stranger the keys to your digital home — everything you value could be at risk!

Put simply

Think of it like a restaurant kitchen where a chef accidentally leaves an ingredient off the orders slip — without proper oversight, someone could slip in any random item they want, ruining the dish. 🥘 These memory safety bugs allow for memory corruption, which can lead to arbitrary code execution if exploited. Simply put, the flaws in code can be mishandled, making it vulnerable to malicious manipulation.

What to do

The consequences are absolutely devastating: an attacker could potentially take control of your system, accessing sensitive data, installing malware, or wreaking havoc in your environment. It’s like giving a total stranger the keys to your digital home — everything you value could be at risk! To protect yourself, upgrade immediately to Firefox 142 and Thunderbird 142. Regularly check for updates and encourage your team to stay informed about security patches. 🚀 You've got this! Follow these steps, and your defenses will be stronger than ever! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00486 · 40.8th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2025-08-20T01:15Z
Affected products (2)
ProductVersionsFixed in
mozilla/firefox< 142.0142.0
mozilla/thunderbird< 142.0142.0
References (3)
EPSS history
Timeline
  • 19 AUG 20:33Z
    Memory safety bugs fixed in Firefox 142 and Thunderbird 142
    cvelistv5