Mozilla Firefox and Thunderbird Information Disclosure Vulnerability in Cache Component

Vulnerability

A vulnerability allowing information disclosure has been identified in the cache component of Firefox versions prior to 143, as well as in Thunderbird versions prior to 143 and prior to 140.3 for the Extended Support Release (ESR). This vulnerability arises from memory safety issues, which could potentially be exploited to access sensitive information.

Impact

Exploitation of this vulnerability leads to unauthorized information disclosure.

Remediation

Users can upgrade to Firefox 143, Thunderbird 143, or Thunderbird ESR 140.3 to address this vulnerability.

Added: Sep 16, 2025, 4:22 PM
Updated: Sep 16, 2025, 4:22 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
2.5
exploitability
4.4
remediation
7.7
relevance
0.5
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.