CVE-2025-11721

critical · 9.8

Memory safety bug present in Firefox 143 and Thunderbird 143. This bug showed evidence of memory corruption and we presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 144 and Thunderbird 144.

9.8

CVSS

0.4%

EPSS (exploit prob.)

30th

EPSS percentile

2025-10-14

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-119

Affected products

Vendor	Product	Affected versions
mozilla	firefox	>= 143.0, < 144.0
mozilla	thunderbird	>= 143.0, < 144.0

Check a specific version with /api/v1/cve/match.

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1986816
https://www.mozilla.org/security/advisories/mfsa2025-81/
https://www.mozilla.org/security/advisories/mfsa2025-84/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-11721