PT-2025-41907 · Mozilla+1 · Firefox+2

Filip Štamcar · Publicado 2025-10-14 · Atualizado 2026-04-15 · CVE-2025-11719

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 144 Thunderbird versions prior to 144

Description A flaw exists in Firefox and Thunderbird where the use of the native messaging API by web extensions on Windows may result in crashes due to use-after-free memory corruption. This issue impacts the stability of the applications when interacting with native messaging hosts.

Recommendations Update Firefox to version 144 or later. Update Thunderbird to version 144 or later.

Correção

Use After Free

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2025-13476

ALT-PU-2025-13478

BDU:2025-14554

CVE-2025-11719

OPENSUSE-SU-2025:15645-1

Produtos afetados

Alt Linux

Firefox

Thunderbird

Referências · 30

• https://twitter.com/giuseppe_1337/status/2044245758778487134 · Publicação no Twitter
• https://bugzilla.mozilla.org/show_bug.cgi?id=1991950 · Nota
• https://suse.com/security/cve/CVE-2025-11713 · Nota
• https://suse.com/security/cve/CVE-2025-11721 · Nota
• https://suse.com/security/cve/CVE-2025-11711 · Nota
• https://suse.com/security/cve/CVE-2025-11710 · Nota
• https://osv.dev/vulnerability/CVE-2025-11719 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-11718 · Nota
• https://mozilla.org/security/advisories/mfsa2025-81 · Aviso do Fabricante
• https://mozilla.org/en-US/security/advisories/mfsa2025-84 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-11715 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-11719 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2025-11719 · Nota de Segurança
• https://mozilla.org/security/advisories/mfsa2025-84 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2025-11716 · Nota