Threat Investigation
Request a demo

CVE-2025-14325

High

Description

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

SeverityHigh
CVSS7.3
Exploit probability28. percentile0.3%
ProductMozilla Firefox
PublishedDec 9, 2025
First seenDec 9, 2025
Weakness typeCWE-843CWE-843

How to fix

Update
  • mozilla firefox140.6.0, 146.0 or later
  • mozilla thunderbird140.6.0, 146.0 or later

Affected products

ProductAffected versionsFixed in
mozilla firefoxv < 140.6.0, v < 146.0140.6.0, 146.0
mozilla thunderbirdv < 140.6.0, v < 146.0140.6.0, 146.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.