Report feedback

An unauthenticated remote attacker can potentially corrupt data in memory or execute code due to an integer overflow in the 'OrderedHashTable' component used by the JavaScript engine in Mozilla Firefox [1][4].

The vulnerability is present in product:

• Mozilla Firefox; <139.0.4;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

More information:

• CVE-2025-49710 at cve.org, NVD
• CWE-190: Integer Overflow or Wraparound at cwe.mitre.org

The vulnerability was publicly disclosed 11. 6. 2025.

An unauthenticated remote attacker can write data outside the allocated buffer through certain operations with the 'canvas' element in Mozilla Firefox, which may lead to memory corruption [1][5].

The vulnerability is present in product:

• Mozilla Firefox; <139.0.4;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

More information:

• CVE-2025-49709 at cve.org, NVD
• CWE-787: Out-of-bounds Write at cwe.mitre.org

The vulnerability was publicly disclosed 11. 6. 2025.

An unauthenticated remote attacker can, using a malicious HTML e-mail that uses mailbox:/// links in Thunderbird, cause unsolicited downloading of files to the user's disk (even when automatic saving is disabled), which may lead to disk exhaustion or disclosure of Windows credentials via SMB (Server Message Block) links, if the e-mail is displayed in HTML mode. The triggering element may be visually hidden, which allows execution without the user's conscious interaction [2][3][6].

The vulnerability is present in product:

• Thunderbird; <128.11.1; >=139.0, <139.0.2;

CVSS: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

More information:

• CVE-2025-5986 at cve.org, NVD
• CWE-451: User Interface (UI) Misrepresentation of Critical Information at cwe.mitre.org

The vulnerability was publicly disclosed 11. 6. 2025.