Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 137, Firefox ESR 128.9, Thunderbird 137, and Thunderbird 128.9.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 HIGH: CVE-2025-3030 (CVSS 8.1) - Memory safety bugs in Firefox 136, Thunderbird 136, ESR 128.8. Potential arbitrary code execution. Patch immediately to v137/128.9. #CVE #PatchNow #ThreatIntel https://t.co/5Es9pTHo1p
Post summary
The tweet alerts users to CVE-2025-3030, a high‑CVSS memory safety issue in Firefox and Thunderbird that could allow arbitrary code execution, and urges immediate patching to versions 137/128.9.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | mozilla | firefox | - | - | - |
| App | mozilla | firefox | - | - | - |
| App | mozilla | thunderbird | - | - | - |