REDHAT-BUG-2395759: High severity Mozilla Firefox ESR vulnerability

Published Sep 16, 2025
·
Updated

Memory safety bugs present in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 143 and Firefox ESR < 140.3.

Affected Software

4 affected components
Mozilla Firefox ESR>=140.2<140.3
Mozilla Firefox<143
Mozilla Thunderbird ESR>=140.2<140.3
Mozilla Thunderbird>=142<143

Event History

Sep 16, 2025
Data Sourced
via Red Hat·01:02 PM
DescriptionSeverityAffected Software

Frequently Asked Questions

1

What is the severity of REDHAT-BUG-2395759?

The severity of REDHAT-BUG-2395759 is critical due to the potential for arbitrary code execution resulting from memory safety bugs.

2

How do I fix REDHAT-BUG-2395759?

To fix REDHAT-BUG-2395759, update Firefox and Thunderbird to the latest version beyond the affected releases.

3

Which versions are affected by REDHAT-BUG-2395759?

REDHAT-BUG-2395759 affects versions 140.2 of Firefox ESR, 142 of Firefox, 140.2 of Thunderbird ESR, and versions 142 to 143 of Thunderbird.

4

What products are impacted by REDHAT-BUG-2395759?

The impacted products under REDHAT-BUG-2395759 include Firefox ESR, Firefox, Thunderbird ESR, and Thunderbird.

5

What are the risks associated with REDHAT-BUG-2395759?

The risks associated with REDHAT-BUG-2395759 include the possibility of memory corruption that could lead to unauthorized access or control over affected systems.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203