CVE-2025-9181 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
mozilla	CNA	---				---
CISA-ADP	ADP	6.5 MEDIUM	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 8%

Vendor	Product	Version
mozilla	firefox	𝑥 < 128.14.0
mozilla	firefox	𝑥 < 142.0
mozilla	firefox	140.0 ≤ 𝑥 < 140.2.0
mozilla	thunderbird	𝑥 < 128.14.0
mozilla	thunderbird	𝑥 < 142.0
mozilla	thunderbird	140.0 ≤ 𝑥 < 140.2.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

firefox

sid	142.0-1 fixed

firefox-esr

bullseye	vulnerable
bullseye (security)	128.14.0esr-1~deb11u1 fixed
bookworm	vulnerable
bookworm (security)	128.14.0esr-1~deb12u1 fixed
trixie (security)	128.14.0esr-1~deb13u1 fixed
forky	vulnerable
trixie	vulnerable
sid	128.14.0esr-1 fixed

thunderbird

bullseye	vulnerable
bullseye (security)	vulnerable
bookworm	vulnerable
bookworm (security)	vulnerable
forky	vulnerable
trixie	vulnerable
sid	1:128.14.0esr-1 fixed

Common Weakness Enumeration

CWE-457 - Use of Uninitialized Variable
The code uses a variable that has not been initialized, leading to unpredictable or unintended results.

Vulnerability Media Exposure

[GERMAN] Mozilla Firefox und Thunderbird: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.
Published: 2025-08-19T22:00:00+00:00

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1977130

https://www.mozilla.org/security/advisories/mfsa2025-64/

https://www.mozilla.org/security/advisories/mfsa2025-66/

https://www.mozilla.org/security/advisories/mfsa2025-67/

https://www.mozilla.org/security/advisories/mfsa2025-70/

https://www.mozilla.org/security/advisories/mfsa2025-71/

https://www.mozilla.org/security/advisories/mfsa2025-72/