Red Hat Security AdvisoryRHSA-2025:21281
firefox security update
Released 2025-11-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream (v. 10) firefox-140.5.0-2.el10_1
Fixes 9 records
Priority MEDIUM 40
Use-after-free in the WebRTC: Audio/Video component.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00306 · Published 2025-11-11 · Partial fix · 140.5, 145 CWE-416
Priority MEDIUM 40
Use-after-free in the Audio/Video component.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00316 · Published 2025-11-11 · Partial fix · 115.30, 140.5 +1 CWE-416
Priority LOW 37
Same-origin policy bypass in the DOM: Workers component.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-11-11 · Partial fix · 140.5, 145 CWE-942
Priority LOW 37
Mitigation bypass in the DOM: Security component.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-11-11 · Partial fix · 140.5, 145 CWE-288
Priority LOW 37
Same-origin policy bypass in the DOM: Notifications component.
CVSS 3.1HIGH 8.1· Network · No auth · User interaction · EPSS 0.00275 · Published 2025-11-11 · Partial fix · 140.5, 145 CWE-942
Priority LOW 35
Incorrect boundary conditions in the JavaScript: WebAssembly component.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00411 · Published 2025-11-11 · Partial fix · 140.5, 145 CWE-703
Priority LOW 34
Race condition in the Graphics component.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.00243 · Published 2025-11-11 · Partial fix · 115.30, 140.5 +1 CWE-362
Priority LOW 27
Mitigation bypass in the DOM: Core & HTML component.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00217 · Published 2025-11-11 · Partial fix · 115.30, 140.5 +1 CWE-288
Priority LOW 16
Spoofing issue in Firefox.
CVSS 3.1LOW 3.4· Network · No auth · User interaction · EPSS 0.00229 · Published 2025-11-11 · Partial fix · 115.30, 140.5 +1 CWE-290