CVE-2025-5268

Memory safety bugs present in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 139, Firefox ESR 128.11, Thunderbird 139, and Thunderbird 128.11.

• CWE-119

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1950136%2C1958121%2C1960499%2C1962634Broken Link
• https://www.mozilla.org/security/advisories/mfsa2025-42/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2025-44/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2025-45/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2025-46/Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/05/msg00043.html
• https://lists.debian.org/debian-lts-announce/2025/05/msg00046.html

Published

May 27, 2025

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-52667Missing JSON Content-Type header in a script in Revive Adser…5.4
• CVE-2025-52668Improper input neutralization in the stats-conversions.php s…5.4
• CVE-2025-52669Insecure design policies in the user management system of Re…4.3
• CVE-2025-5267A clickjacking vulnerability could have been used to trick a…5.4
• CVE-2025-52670Missing authorization check in Revive Adserver 5.5.2 and 6.0…6.5
• CVE-2025-52671Debug information disclosure in the SQL error message to in …4.3
• CVE-2025-52687Successful exploitation of the vulnerability could allow an …2.4
• CVE-2025-52688Successful exploitation of the vulnerability could allow an …9.8
• CVE-2025-52689Successful exploitation of the vulnerability could allow an …9.8
• CVE-2025-5269Memory safety bug present in Firefox ESR 128.10, and Thunder…8.1
• CVE-2025-52690Successful exploitation of the vulnerability could allow an …8.1
• CVE-2025-52691Successful exploitation of the vulnerability could allow an …10