ROS-20251217-7308

A vulnerability in the DOM: Core & HTML component of Mozilla Firefox and Firefox ESR browsers is related to a data protection mechanism violation. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions...

SUSE: Security Advisory (SUSE-SU-2025:4396-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 140.6.0 ESR bsc1254551. MFSA 2025-94 CVE-2025-14321: use-after-free in the WebRTC: Signaling component. CVE-2025-14322: sandbox escape due to incorrect boundary conditions in the Graphics:...

[SECURITY] Fedora 42 Update: firefox-146.0-3.fc42

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

ROS-20251215-7303

A vulnerability in Mozilla Firefox, Firefox ESR and Thunderbird email client is related to an operation exceeding the memory buffer boundaries. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

The vulnerabilities of Canvas and WebGL interfaces in Mozilla Firefox, Firefox ESR, and the email client Thunderbird allow attackers to bypass the sandboxing protection mechanisms.

The vulnerability of Canvas and WebGL interfaces in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a remote attacker to bypass the sandboxing protection mechanisms...

MozillaFirefox-146.0-1.1 on GA media (moderate)

MozillaFirefox-146.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15813-1 Rating: moderate Cross-References: CVE-2025-14321 CVE-2025-14322 CVE-2025-14323 CVE-2025-14324 CVE-2025-14325 CVE-2025-14326 CVE-2025-14327 CVE-2025-14328 CVE-2025-14329 CVE-2025-14330 CVE-2025-14331 CVE-2025-14332...

OPENSUSE-SU-2025:15813-1 MozillaFirefox-146.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-146.0-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox Security Update (mfsa_2025-92) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Advisory (MFSA2025-92) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-92. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-firefox-140.6.0esr-i686-1slack15.0.txz: Upgraded. This update contains security fixes and improvements. For more...

EUVD-2025-202157

Same-origin policy bypass in the Request Handling component. This vulnerability affects Firefox 146, Firefox ESR 115.31, and Firefox ESR 140.6...

PT-2025-53515

Уязвимость компонента Downloads Panel браузера Mozilla Firefox и почтового клиента Thunderbird связана с недостатками процедуры аутентификации в результате некорректного отображения доменного имени в адресной строке. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно,...

Mozilla Firefox 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in versions prior to Mozilla Firefox 146 that stems...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 146, Firefox ES...

Mozilla Firefox 访问控制错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation. An access control error vulnerability exists in Mozilla Firefox versions prior to 146, Firefox ESR versions prior to 115.31, and versions prior to 140.6, which stems from a same-origin policy bypass issue in the Request...

Mozilla Firefox和Mozilla Firefox ESR 安全漏洞

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation, U.S.A. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 146 and Firefox...

Mozilla Firefox 缓冲区错误漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A buffer error vulnerability exists in Mozilla Firefox versions prior to 146 and ESR 140.6, which stems from a memory security issue that could lead to memory corruption and execution of arbitrary code...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 146, Firefox ESR versions prior to 115.31, and versions prior to 140.6, which stems from improper handling of boundary conditions in...

PT-2025-53516

Уязвимость компонента Netmonitor браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...