Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A vulnerability has been identified in Mozilla Firefox and Thunderbird applications, specifically in versions prior to 135, as well as in Firefox ESR 128.6 and Thunderbird ESR 128.6. This vulnerability arises from memory safety issues that could lead to memory corruption. With sufficient effort, these issues might have been exploited to execute arbitrary code.

Impact

Exploitation of this vulnerability could have allowed for arbitrary code execution.

Remediation

Users can upgrade to Firefox 135, Thunderbird 135, Firefox ESR 128.7, or Thunderbird ESR 128.7 to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.