CVE-2025-1012

Summary

CVE-2025-1012 is a use-after-free vulnerability that arises from a race condition during concurrent delazification in Firefox versions below 135, Firefox ESR versions below 115.20 and 128.7, Thunderbird versions below 128.7, and Thunderbird versions below 135. This issue occurs when memory that has been freed is accessed again, potentially leading to unintended application behavior or crashes. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial-of-service condition, posing a significant risk to users. It is highly recommended that affected users update their browsers and email clients to the latest versions to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.