Red Hat Security AdvisoryRHSA-2025:18155
firefox security update
Released 2025-10-15 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 9) firefox-140.4.0-3.el9_6, firefox-x11-140.4.0-3.el9_6
Fixes 7 records
Priority MEDIUM 49
A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00422 · Published 2025-10-14 · Partial fix · 115.29, 140.4 +1 CWE-200
Priority MEDIUM 49
A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00422 · Published 2025-10-14 · Partial fix · 115.29, 140.4 +1 CWE-787
Priority MEDIUM 49
Use-after-free in MediaTrackGraphImpl::GetInstance().
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00509 · Published 2025-10-14 · Partial fix · 140.4, 144 CWE-416
Priority MEDIUM 40
Memory safety bugs present in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00328 · Published 2025-10-14 · Partial fix · 140.4, 144 CWE-119
Priority MEDIUM 40
Memory safety bugs present in Firefox ESR 115.28, Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00335 · Published 2025-10-14 · Partial fix · 115.29, 140.4 +1 CWE-119
Priority LOW 28
There was a way to change the value of JavaScript Object properties that were supposed to be non-writeable.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0023 · Published 2025-10-14 · Partial fix · 115.29, 140.4 +1 CWE-591
Priority LOW 27
A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00221 · Published 2025-10-14 · Partial fix · 140.4, 144 CWE-116
THREATIST.IORead the docs