TI-2025-05825 CVE-2025-6424 · GHSA-87c4-94w2-rw7j
Use-after-free in FontFaceSet
Priority MEDIUM 60
A use-after-free in FontFaceSet resulted in a potentially exploitable crash.
RHSA-2025:10187
firefox security update
Released 2025-07-02 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream E4S (v.9.0) firefox-128.12.0-1.el9_0
Fixes 4 records
TI-2025-05830 CVE-2025-6429 · GHSA-8r38-4g4q-hgvw
Incorrect parsing of URLs could have allowed embedding of youtube.com
Priority LOW 29
Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag.
TI-2025-05831 CVE-2025-6430 · GHSA-fvqv-c5hj-jcrp
Content-Disposition header ignored when a file is included in an embed or object tag
Priority LOW 27
When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a…
TI-2025-05826 CVE-2025-6425 · GHSA-2h3c-qrcw-962q
The WebCompat WebExtension shipped with Firefox exposed a persistent UUID
Priority LOW 20
An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles.