Volerion logoVolerion
Volerion logoVolerion

Mozilla Firefox and Thunderbird Use-After-Free Vulnerability in XSLT Processing

Vulnerability

A use-after-free vulnerability has been identified in Mozilla Firefox and Thunderbird applications, specifically in versions prior to Firefox 135, Firefox ESR 115.20, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135. This vulnerability arises from the improper handling of crafted XSLT data, which could lead to a crash that might be exploitable.

Impact

Exploitation of this vulnerability could lead to a crash of the application, with the potential for arbitrary code execution.

Remediation

Users can upgrade to Firefox 135, Firefox ESR 115.20, or Thunderbird 135 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
0.6
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.