CVE-2025-4093

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 29, 2025
Updated: May 9, 2025
CWE ID 119

Summary

CVE-2025-4093 is a memory safety bug discovered in Firefox ESR 128.9 and Thunderbird 128.9. The issue involves potential memory corruption, raising concerns that it could be exploited to run arbitrary code. This vulnerability affects older versions of Firefox ESR below 128.10 and Thunderbird below 128.10. Users are strongly encouraged to update their browsers to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Mozilla Firefox
  • Mozilla Thunderbird

Affected Vendors

  • Mozilla

Advisories, Assessments, and Mitigations