Use-After-Free Memory Corruption in Firefox and Thunderbird
CVE-2025-11719

Currently unrated

Key Information:

Vendor

Mozilla

Vendor
CVE Published:
14 October 2025

What is CVE-2025-11719?

In Firefox and Thunderbird, versions prior to 144, a vulnerability exists within the native messaging API utilized by web extensions on Windows. This flaw can result in crashes due to use-after-free memory corruption, potentially impacting user experience and system stability. Users are advised to upgrade to the latest versions to mitigate the risk associated with this issue.

Affected Version(s)

Firefox < 144

Thunderbird < 144

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Filip Ĺ tamcar
.
CVE-2025-11719 : Use-After-Free Memory Corruption in Firefox and Thunderbird