Memory Safety Vulnerabilities in Firefox and Thunderbird
CVE-2025-13027

8.1HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Thunderbird
Vendor
CVE Published:
11 November 2025

What is CVE-2025-13027?

Mozilla's Firefox and Thunderbird products contain memory safety bugs that could potentially lead to memory corruption issues. These vulnerabilities may allow an attacker to execute arbitrary code if successfully exploited, particularly in versions of Firefox and Thunderbird prior to 145. Users are encouraged to update to the latest versions to mitigate these risks.

Affected Version(s)

Firefox < 145

Thunderbird < 145

References

https://bugzilla.mozilla.org/buglist.cgi?bug_id=1987237%2...
https://www.mozilla.org/security/advisories/mfsa2025-87/
https://www.mozilla.org/security/advisories/mfsa2025-90/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

The Mozilla Fuzzing Team
JSON
.