CVE-2025-1010

Summary

CVE-2025-1010 is a use-after-free vulnerability affecting Firefox versions under 135, Firefox ESR versions under 115.20 and 128.7, Thunderbird versions under 128.7, and Thunderbird versions under 135. An attacker could exploit this flaw through the Custom Highlight API, potentially causing a crash. The exploitation may lead to arbitrary code execution if the attacker can persuade a user to visit a specially crafted webpage. This vulnerability poses a significant risk to users browsing untrusted websites. It is recommended that users update their Firefox and Thunderbird browsers as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.