Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 142 and Thunderbird 142.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Dell Powerstore Dsa2026115 | — | Upgrade Dell PowerStoreOS to the latest version | Feb 25, 2026 | Feb 24, 2026 |
| Freebsd | — | Upgrade thunderbirdUpgrade firefox | Dec 10, 2025 | Aug 21, 2025 |
| Mfsa2025 64 | — | Upgrade to Mozilla Firefox version 142.0 | Aug 21, 2025 | Aug 19, 2025 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 142.0 | Aug 22, 2025 | Aug 19, 2025 |
| Suse | — | Upgrade mozilla-nssUpgrade mozilla-nss-sysinitUpgrade libsoftokn3-32bitUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-sysinit-32bitUpgrade mozillafirefox-translations-commonUpgrade libsoftokn3Upgrade mozillafirefoxUpgrade mozillafirefox-translations-otherUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade mozillafirefox-develUpgrade mozilla-nss-certs-32bitUpgrade libfreebl3Upgrade mozilla-nss-certsUpgrade mozilla-nss-toolsUpgrade mozilla-nss-32bit | Dec 5, 2025 | Aug 28, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub