CVE-2025-14329
BaseFortify
Publication date: 2025-12-09
Last updated on: 2026-04-13
Assigner: Mozilla Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| mozilla | firefox | * |
| mozilla | firefox_esr | * |
| mozilla | thunderbird | to 140.6.0 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
What immediate steps should I take to mitigate this vulnerability?
Update Firefox to version 146 or later, or Firefox ESR to version 140.6 or later to address the privilege escalation vulnerability in the Netmonitor component.
Can you explain this vulnerability to me?
This vulnerability is a privilege escalation issue in the Netmonitor component of Firefox versions prior to 146 and Firefox ESR versions prior to 140.6. It allows an attacker to gain higher privileges than intended within the affected software.
How can this vulnerability impact me? :
The vulnerability can lead to an attacker gaining elevated privileges, which may result in full control over the affected Firefox browser, potentially allowing them to access, modify, or delete sensitive information, and disrupt system integrity and availability.