CVE-2025-14861
Last modified
CVE-2025-14861 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. EPSS estimates a 0.21% chance of exploitation in the next 30 days.
Description
Memory safety bugs present in Firefox 146. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146.0.1.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Firefox | < 146.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2025-14861?
How severe is CVE-2025-14861?
How do I fix CVE-2025-14861?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-14856A security vulnerability has been detected in y_project RuoY…8.8
- CVE-2025-14857An improper access control vulnerability exists in Semtech L…5.4
- CVE-2025-14858The Semtech LR11xx LoRa transceivers running early versions …5.1
- CVE-2025-14859The Semtech LR11xx LoRa transceivers implement secure boot f…7
- CVE-2025-1486The WoWPth WordPress plugin through 2.0 does not sanitise an…7.1
- CVE-2025-14860Use-after-free in the Disability Access APIs component. This…9.8
- CVE-2025-14864The Virusdie - One-click website security plugin for WordPre…4.3
- CVE-2025-14865The Passster – Password Protect Pages and Content plugin for…6.4
- CVE-2025-14866The Melapress Role Editor plugin for WordPress is vulnerable…8.8
- CVE-2025-14867The Flashcard plugin for WordPress is vulnerable to Path Tra…6.5
- CVE-2025-14868The Career Section plugin for WordPress is vulnerable to Cro…8.8
- CVE-2025-14869GitLab has remediated an issue in GitLab CE/EE affecting all…7.5
Are you affected by CVE-2025-14861?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST