216.73.217.22

CVE-2025-8035

· Published 22/07/2025 21:15 · Modified 23/07/2025 16:15

Labels: CVE-2025-8035 2025-07-22CVE-2025-8035CWE-119[email protected]

Essential information

Published
22/07/2025 21:15
Modified
23/07/2025 16:15
Author
—
Creator
—
CVSS
8.8 HIGH (v3.1)
CISA KEV
No
CWE
—
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS metrics

Description

Memory safety bugs present in Firefox ESR 128.12, Thunderbird ESR 128.12, Firefox ESR 140.0, Thunderbird ESR 140.0, Firefox 140 and Thunderbird 140. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 141, Firefox ESR < 128.13, Firefox ESR < 140.1, Thunderbird < 141, Thunderbird < 128.13, and Thunderbird < 140.1.

NVD status

Status
Received — CVE has been recently published to the CVE List and has been received by the NVD.
Source
[email protected]
NVD
View on NVD

Affected products (CPE)

ProductCPE
mozilla / firefox cpe:2.3:a:mozilla:firefox:<141:*:*:*:*:*:*
mozilla / firefox esr cpe:2.3:a:mozilla:firefox_esr:<128.13:*:*:*:*:*:*
mozilla / firefox esr cpe:2.3:a:mozilla:firefox_esr:<140.1:*:*:*:*:*:*
mozilla / thunderbird cpe:2.3:a:mozilla:thunderbird:<141:*:*:*:*:*:*
mozilla / thunderbird esr cpe:2.3:a:mozilla:thunderbird_esr:<128.13:*:*:*:*:*:*
mozilla / thunderbird esr cpe:2.3:a:mozilla:thunderbird_esr:<140.1:*:*:*:*:*:*

References