vulnerability

MFSA2025-64 Firefox: Security Vulnerabilities fixed in Firefox 142 (CVE-2025-9181)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:N/A:N)

Published

Aug 19, 2025

Added

Aug 21, 2025

Modified

Apr 15, 2026

Description

Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

Solution

mozilla-firefox-upgrade-142_0

References

CVE-2025-9181
https://attackerkb.com/topics/CVE-2025-9181
CWE-457
EUVD-EUVD-2025-25244
http://www.mozilla.org/security/announce/2025/mfsa2025-64.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-25244

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report