Race Condition Vulnerability in Mozilla Firefox Web Browser
CVE-2025-13012

7.5HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
11 November 2025

What is CVE-2025-13012?

A race condition exists in the Graphics component of Mozilla Firefox. This vulnerability can occur under specific conditions, potentially leading to unexpected behavior or crashes in the affected versions. It impacts users running Firefox versions below 145 and Firefox ESR below 140.5 and 115.30. Prompt updates are recommended to mitigate potential risks associated with this vulnerability.

Affected Version(s)

Firefox < 145

Firefox ESR < 140.5

Firefox ESR < 115.30

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1991458
https://www.mozilla.org/security/advisories/mfsa2025-87/
https://www.mozilla.org/security/advisories/mfsa2025-88/

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Irvan Kurniawan
JSON
.