CVE-2025-1937
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs
CVSS
7.5
High
EPSS
0.6%
p46
KEV
—
Exploit Today
14
0-100
Published: Mar 4, 2025 · Last modified: Oct 5, 2026 · CWE-1260
0.6%EPSS · 30 days0.6%
2026-09-222026-10-20
Memory safety bugs present in Firefox 135, Thunderbird 135, Firefox ESR 115.20, Firefox ESR 128.7, and Thunderbird 128.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 136, Firefox ESR 115.21, Firefox ESR 128.8, Thunderbird 136, and Thunderbird 128.8.
- bugzilla.mozilla.orghttps://bugzilla.mozilla.org/buglist.cgi?bug_id=1938471%2C1940716
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2025-14/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2025-15/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2025-16/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2025-17/
- www.mozilla.orghttps://www.mozilla.org/security/advisories/mfsa2025-18/
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2025/03/10/6
- lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00006.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-766686.3 MED0.1%
——0A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.6dCVE-2026-20760—0.9%
——0Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege. Authorized adversary with a privileged user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.70dCVE-2025-319365.7 MED0.7%
——0Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege. SMM adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts.22dCVE-2018-252406.2 MED1.5%
——0Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash.93dCVE-2018-252386.2 MED4.6%
——1VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an application crash.15dCVE-2019-255726.2 MED4.7%
——1NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash.15d