Threat Advisories:

Firefox Users at Risk: Two Major Flaws Found and Fixed

Red | Vulnerability Report
Download PDF

Mozilla has rushed out emergency updates to fix two critical bugs in Firefox that hackers exploited even before they were publicly known. These flaws, revealed during the Pwn2Own hacking contest, could let attackers mess with browser memory and potentially run malicious code or steal sensitive data. The issues tracked as CVE-2025-4918 and CVE-2025-4919 involve how Firefox handles JavaScript promises and array math. If you’re using Firefox and haven’t updated yet, you’re at risk. Make sure to upgrade to the latest version to stay protected.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox

Cyber Horizons 2025

What Last Year’s Attacks Reveal About Today’s Risks

Watch the Webinar on-demand and get a FREE copy of our Cyber Horizons 2025 report.

Our Speakers
Speaker 1

Prateek Bhajanka Global Field CISO & Former Gartner Analyst Hive Pro Inc.

Speaker 2

Ankit Mani Manager Threat Intel HiveForce Labs

Speaker 3

Sreevani Tonipe Senior Threat Researcher HiveForce Labs