Mozilla Firefox and Thunderbird Incorrect Boundary Conditions Vulnerability in JavaScript Garbage Collection Component

Vulnerability

A vulnerability exists in Firefox versions prior to 143, Firefox ESR versions prior to 140.3, Thunderbird versions prior to 143, and Thunderbird ESR versions prior to 140.3. This vulnerability is due to incorrect boundary conditions in the JavaScript garbage collection component, which could potentially be exploited.

Impact

Exploitation of this vulnerability could lead to a sandbox escape, allowing for unauthorized actions or access.

Remediation

Users can upgrade to Firefox 143, Firefox ESR 140.3, Thunderbird 143, or Thunderbird ESR 140.3 to address this vulnerability.

Added: Sep 16, 2025, 4:25 PM
Updated: Sep 16, 2025, 4:25 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
0.5
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.