Privilege Escalation in Firefox Netmonitor Component
CVE-2025-14328

8.8HIGH

Key Information:

Vendor

Mozilla
Status
Firefox
Firefox Esr
Thunderbird
Vendor
CVE Published:
9 December 2025

What is CVE-2025-14328?

A vulnerability in the Netmonitor component of Firefox allows users with limited permissions to escalate their privileges, potentially leading to unauthorized access to sensitive functionalities. This issue affects several versions of the browser, specifically those below version 146 and the ESR version below 140.6. It is essential for users to keep their browsers updated to mitigate the risks associated with this vulnerability.

Affected Version(s)

Firefox < 146

Firefox ESR < 140.6

Thunderbird < 146

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1996761
https://www.mozilla.org/security/advisories/mfsa2025-92/
https://www.mozilla.org/security/advisories/mfsa2025-94/

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ameen Basha M K
JSON
.