CVE-2025-4092
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 29, 2025
Updated: May 9, 2025
CWE ID 119
Summary
CVE-2025-4092 refers to a set of memory safety bugs discovered in Firefox version 137 and Thunderbird version 137. These vulnerabilities, some of which indicate memory corruption, potentially enable an attacker to execute arbitrary code. The impacted versions of Firefox and Thunderbird are below 138. Users are strongly advised to update their browsers to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mozilla Firefox
- Mozilla Thunderbird
Affected Vendors
- Mozilla