CVE Vulnerabilities

CVE-2025-14324

Published: Dec 09, 2025 | Modified: Dec 11, 2025
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.5 IMPORTANT
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability affects Firefox < 146, Firefox ESR < 115.31, Firefox ESR < 140.6, Thunderbird < 146, and Thunderbird < 140.6.

Affected Software

Name Vendor Start Version End Version
Firefox Mozilla * 115.31.0 (excluding)
Firefox Mozilla * 146.0 (excluding)
Firefox Mozilla 116.0 (including) 140.6.0 (excluding)
Thunderbird Mozilla * 140.6.0 (excluding)
Thunderbird Mozilla * 146.0 (excluding)
Red Hat Enterprise Linux 10 RedHat firefox-0:140.6.0-1.el10_1 *
Red Hat Enterprise Linux 8 RedHat firefox-0:140.6.0-1.el8_10 *
Red Hat Enterprise Linux 9 RedHat firefox-0:140.6.0-1.el9_7 *
Mozjs102 Ubuntu esm-apps/noble *
Mozjs102 Ubuntu jammy *
Mozjs102 Ubuntu noble *
Mozjs115 Ubuntu noble *
Mozjs115 Ubuntu plucky *
Mozjs52 Ubuntu esm-apps/focal *
Mozjs52 Ubuntu esm-infra/bionic *
Mozjs68 Ubuntu esm-infra/focal *
Mozjs78 Ubuntu esm-apps/jammy *
Mozjs78 Ubuntu jammy *
Mozjs91 Ubuntu jammy *
Thunderbird Ubuntu jammy *

References