Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.
Priority
MEDIUM
Exploitation
ACTIVE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH: CVE-2025-1011 (CVSS 8.8) WebAssembly bug in Firefox/Thunderbird enables potential code execution via crash exploitation. Affected: Firefox <135, ESR <128.7, Thunderbird <128.7/135 Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/1lTk0ZcYop
📢 𝐍𝐞𝐰 𝐂𝐕𝐄 𝐚𝐧𝐚𝐥𝐲𝐬𝐢𝐬 𝐣𝐮𝐬𝐭 𝐝𝐫𝐨𝐩𝐩𝐞𝐝! Active exploitation of CVE-2025-1011 in FortiSIEM demands urgent patching; discover how to detect, defend, and minimize breach risk now before impact. 📖 Check the detailed report → https://www.purple-ops.io/cybersecurity-threat-intelligence-blog/cve-2025-1011-fortisiem-exploit-analysis/ Stay safe, and let us know your thoughts!
Post summary
The post announces that CVE-2025-1011 is actively exploited in FortiSIEM and urges immediate patching, with a link to a detailed analysis.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |
| App | mozilla | thunderbird | - | - | - |