CVE-2025-3034

Memory safety bugs present in Firefox 136 and Thunderbird 136. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 137 and Thunderbird 137.

• CWE-787

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1894100%2C1934086%2C1950360Broken Link, Issue Tracking
• https://www.mozilla.org/security/advisories/mfsa2025-20/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2025-23/Vendor Advisory

Published

Apr 1, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-30327InCopy versions 20.2, 19.5.3 and earlier are affected by an …7.8
• CVE-2025-30328Animate versions 24.0.8, 23.0.11 and earlier are affected by…7.8
• CVE-2025-30329Animate versions 24.0.8, 23.0.11 and earlier are affected by…5.5
• CVE-2025-3033After selecting a malicious Windows `.url` shortcut from the…7.7
• CVE-2025-30330Illustrator versions 29.3, 28.7.5 and earlier are affected b…7.8
• CVE-2025-30334In OpenBSD 7.6 before errata 006 and OpenBSD 7.5 before erra…7.1
• CVE-2025-30342An XSS issue was discovered in OpenSlides before 4.2.5. When…6.1
• CVE-2025-30343A directory traversal issue was discovered in OpenSlides bef…6.5
• CVE-2025-30344An issue was discovered in OpenSlides before 4.2.5. During l…3.7
• CVE-2025-30345An issue was discovered in OpenSlides before 4.2.5. When cre…4.1
• CVE-2025-30346Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0…4.8
• CVE-2025-30347Varnish Enterprise before 6.0.13r13 allows remote attackers …7.5