CVE-2025-14324 is a high-severity vulnerability caused by a miscompilation issue in the JIT component of Mozilla Firefox's JavaScript engine. The flaw could allow an attacker to cause significant security impacts such as arbitrary code execution or other critical compromises. Mozilla addressed this vulnerability in Firefox 146 and corresponding ESR and Thunderbird versions. The CVSS v3.1 base score is 9.8, reflecting network attack vector, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. The vendor advisory confirms the fix and provides references to the underlying bug report (Bug 1996840).

Successful exploitation of this vulnerability could lead to complete compromise of the affected Firefox or Thunderbird application, including arbitrary code execution and full system compromise. The CVSS score of 9.8 indicates critical impact on confidentiality, integrity, and availability. There are no reports of active exploitation in the wild as of the advisory date.

This vulnerability has been officially fixed by Mozilla in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6. Users and administrators should update to these versions or later to remediate the issue. No additional mitigation steps are required beyond applying the official patches.