Mozilla Foundation Security Advisory 2025-92
Security Vulnerabilities fixed in Firefox 146
- Announced
- December 9, 2025
- Impact
- high
- Products
- Firefox
- Fixed in
-
- Firefox 146
#CVE-2025-14321: Use-after-free in the WebRTC: Signaling component
- Reporter
- Igor Morgenstern
- Impact
- high
References
#CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- Reporter
- Oskar L
- Impact
- high
References
#CVE-2025-14323: Privilege escalation in the DOM: Notifications component
- Reporter
- tiebuchen
- Impact
- high
References
#CVE-2025-14324: JIT miscompilation in the JavaScript Engine: JIT component
- Reporter
- Lingming Zhang
- Impact
- high
References
#CVE-2025-14325: JIT miscompilation in the JavaScript Engine: JIT component
- Reporter
- zx
- Impact
- high
References
#CVE-2025-14326: Use-after-free in the Audio/Video: GMP component
- Reporter
- Andrew McCreight
- Impact
- moderate
References
#CVE-2025-14327: Spoofing issue in the Downloads Panel component
- Reporter
- Caro Kann
- Impact
- moderate
References
#CVE-2025-14328: Privilege escalation in the Netmonitor component
- Reporter
- Ameen Basha M K
- Impact
- moderate
References
#CVE-2025-14329: Privilege escalation in the Netmonitor component
- Reporter
- satrya wira yudha
- Impact
- moderate
References
#CVE-2025-14330: JIT miscompilation in the JavaScript Engine: JIT component
- Reporter
- Rong Bao
- Impact
- moderate
References
#CVE-2025-14331: Same-origin policy bypass in the Request Handling component
- Reporter
- Igor Morgenstern
- Impact
- moderate
References
#CVE-2025-14332: Memory safety bugs fixed in Firefox 146 and Thunderbird 146
- Reporter
- Jon Coppeard, Maurice Dauer and the Mozilla Fuzzing Team
- Impact
- moderate
Description
Memory safety bugs present in Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
References
#CVE-2025-14333: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146
- Reporter
- Maurice Dauer and the Mozilla Fuzzing Team
- Impact
- moderate
Description
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.