Read the docs
Red Hat Security Advisory

RHSA-2025:8640

firefox security update

Released 2025-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 2 records

Priority MEDIUM 55

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.09515 Published 2025-05-17 Partial fix · 115.23.1, 128.10.1 +3 CWE-125
Priority MEDIUM 52

An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09115 Published 2025-05-17 Partial fix · 115.23.1, 128.10.1 +3 CWE-125