GCVE-110-NCSC-2025-325

Advisory PublishedCVSS 9.8/10

Vulnetix · Advisory published October 20, 2025

A vulnerability affecting specific versions of Firefox and Thunderbird allows modification of non-writeable JavaScript Object properties, as assessed by Red Hat Product Security based on a Mozilla Foundation Security Advisory.

Download JSON Open in Console

Weaknesses (CWE)

CWE-416Use After FreeCWE-125Out-of-bounds ReadCWE-497Exposure of Sensitive System Information to an Unauthorized Control SphereCWE-284Improper Access ControlCWE-436Interpretation ConflictCWE-88Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-451User Interface (UI) Misrepresentation of Critical Information

Risk Scores

CVSS 3.1

9.8/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected Products

Vendor	Product	Versions	Platforms
Mozilla	vers:unknown/*	—	—

Aliases

CVE-2025-11708 CVE-2025-11709 CVE-2025-11710 CVE-2025-11711 CVE-2025-11712 CVE-2025-11713 CVE-2025-11714 CVE-2025-11715 CVE-2025-11716 CVE-2025-11717 CVE-2025-11718 CVE-2025-11719 CVE-2025-11720 CVE-2025-11721

References

advisory

Browse GCVE Records

73,734 records in the GCVE database · Updated July 18, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON