Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-28 | 2 | Exploit1General1 |
| 2026-03-30 | 1 | Disclosure1 |
| 2026-03-31 | 1 | PoC1 |
| 2026-04-28 | 1 | Disclosure1 |
Check out my latest blog post. I hope you all enjoy it 👉👈 https://qriousec.github.io/post/cve-2025-14325/
Post summary
The tweet simply points to a blog post about CVE-2025-14325 without providing evidence of exploit availability, active use, patches, or technical specifics.
Technical details on exploiting Firefox 0day we found last year by AI-assisted fuzzing. by @lanleft_ https://qriousec.github.io/post/cve-2025-14325/
Post summary
The post shares technical exploitation details and likely PoC code for Firefox CVE‑2025‑14325 discovered through AI-assisted fuzzing, but it does not discuss active attacks, patches, or debunking.
#exploit #AppSec 1⃣ CVE-2026-4946: https://takeonme.org/cves/cve-2026-4946 NSA Ghidra Auto-Analysis Annotation Command Execution // A novel and highly effective attack against reverse engineers and malware analysts. By embedding malicious annotation payloads into distributed binaries, an attacker can reliably achieve code execution on the systems of analysts who inspect those binaries in Ghidra 2⃣ CVE-2025-14325: https://qriousec.github.io/post/cve-2025-14325/ SpiderMonkey Type Confusion in Baseline JIT Inline Cache // A type confusion in SpiderMonkey's JIT inline cache that enables arbitrary memory access and RCE through heap leaks and memory overlapping exploits during property operations
Post summary
The post highlights two CVEs, links to detailed pages likely containing proof‑of‑concept code, and provides technical details of the vulnerabilities but does not mention active exploitation or patches.
CVE-2025-14325: SpiderMonkey Type Confusion in Baseline JIT Inline Cache - found via AI assisted fuzzing http://dlvr.it/TSGnlY #cyber #threathunting #infosec
Post summary
The tweet announces the discovery of CVE-2025-14325, a type confusion flaw in Firefox’s SpiderMonkey JIT engine, and provides a link to further details, but offers no exploit, patch, or active abuse information.
2026-03-28 の人気記事はコチラでした。(自動ツイート) #Hacker_Trends ――― CVE-2025-14325: SpiderMonkey Type Confusion in Baseline JIT Inline Cache https://hacker-trends.motikan2010.com/2026-03-28#f0679db2749b2d85f0f910abee56833e https://t.co/fvlXnV0877
Post summary
The tweet references CVE‑2025‑14325, shares a link to an article, and provides a brief technical description, but offers no proof‑of‑concept, exploit details, or patch information.
4 of 4 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |
| App | mozilla | thunderbird | - | - | - |