Loading vulnerability…
Privilege Escalation in Mozilla Firefox and Thunderbird Netmonitor
CVE-2025-14328 is a privilege escalation vulnerability in the Netmonitor component used by Mozilla Firefox and Thunderbird. It affects Firefox versions before 146 and Firefox ESR versions before 140.6, and was also fixed in Thunderbird 146 and Thunderbird ESR 140.6. Mozilla rates the vulnerability as moderate impact. The specific vulnerable function and underlying implementation defect are not publicly detailed in the available information.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an attacker to escalate privileges through the Netmonitor component. The precise security boundary crossed and the resulting privilege level are not specified. Arbitrary code execution, operating-system administrator access, and full system compromise are not established for this vulnerability.
If you can’t patch tonight, do this now.
No vulnerability-specific temporary workaround is documented. Until updates are applied, restrict exposure to untrusted web and email content and run affected applications with least privilege. These measures reduce general exposure but are not established as preventing exploitation of this flaw.
Patch, then assume compromise.
Upgrade to Firefox 146 or later, Firefox ESR 140.6 or later, Thunderbird 146 or later, or Thunderbird ESR 140.6 or later, as appropriate for the installed release channel. Distribution-managed installations should apply the corresponding vendor security package update.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
21 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.