CVE-2025-14321
Discovered by AISLEPUBLISHED
Description
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVSS Base Scores
CVSS v3.1(Primary)
9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Version | Status |
|---|---|---|---|
| Mozilla | Firefox | 140.6 | unaffected |
| Mozilla | Firefox | 146 | — |
| Mozilla | Thunderbird | 140.6 | unaffected |
| Mozilla | Thunderbird | 146 | — |
Credits
- Igor Morgenstern