Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2025-9184
CVE-2025-9184:
Mozilla Firefox vulnerability analysis and mitigation
Overview
CVE-2025-9184 is a high-impact memory safety vulnerability affecting multiple Mozilla products, discovered by Paul Bone, Ryan VanderMeulen and the Mozilla Fuzzing Team. The vulnerability was disclosed on August 19, 2025, affecting Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141, and Thunderbird 141 (Mozilla Advisory).
Technical details
The vulnerability involves memory safety bugs that showed evidence of memory corruption. According to the technical assessment, these bugs could potentially be exploited to run arbitrary code with enough effort. The issue affects multiple versions of Mozilla's products and has been assigned a high-impact severity rating (Mozilla Advisory).
Impact
The vulnerability could allow attackers to execute arbitrary code through memory corruption exploitation. This poses significant risks to affected systems, particularly in browser or browser-like contexts. For Thunderbird specifically, these flaws cannot be exploited through email as scripting is disabled when reading mail (Mozilla Advisory).
Mitigation and workarounds
The vulnerability has been patched in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird ESR 140.2. Users are advised to update to these versions to mitigate the risk (Mozilla Advisory).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management