firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption, and we presume that with enough...

firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption, and we presume that with enough...

MozillaFirefox-137.0.2-1.1 on GA media (moderate)

MozillaFirefox-137.0.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15005-1 Rating: moderate Cross-References: CVE-2025-3608 CVSS scores: CVE-2025-3608 SUSE : 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVE-2025-3608 SUSE : 7.7...

OPENSUSE-SU-2025:15005-1 MozillaFirefox-137.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-137.0.2-1.1 package on the GA media of openSUSE Tumbleweed...

Mozilla Firefox Security Update (mfsa_2025-25) - Mac OS X

Mozilla Firefox is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Mozilla Firefox Security Update (mfsa_2025-25) - Windows

Mozilla Firefox is prone to a memory corruption vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

ROS-20250417-10

Vulnerability in Mozilla Firefox, Firefox ESR browsers and Thunderbird email client of operating systems Windows is related to a post-release usage error in XSLTProcessor. Exploitation of the vulnerability could allow an attacker acting remotely to compromise a vulnerable system...

ROS-20250417-09

Vulnerability in Mozilla Firefox, Firefox ESR browsers and Thunderbird email client of operating systems Windows is related to a post-release usage error in XSLTProcessor. Exploitation of the vulnerability could allow an attacker acting remotely to compromise a vulnerable system...

Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management

Summary Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management have been delivered in a HotFix for 2.3 FP9 Vulnerability Details CVEID:CVE-2024-6600 DESCRIPTION: Mozilla Firefox could allow a remote attacker to gain unauthorized access to the system, caused by a memory corruption in...

Mozilla Firefox 安全漏洞

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox versions prior to 137.0.2, which stems from a competing condition in nsHttpTransaction that could lead to memory corruption...

KLA82678 SB vulnerability in Mozilla Firefox

Security vulnerability was found in Mozilla Firefox. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories MFSA2025-25 Related products Mozilla-Firefox CVE list CVE-2025-3608 high Solution Update to the latest version Download Mozilla Firefox Impacts ...

Mozilla Firefox < 137.0.2

The version of Firefox installed on the remote Windows host is prior to 137.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-25 advisory. - A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading ...

Mozilla Firefox < 137.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 137.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-25 advisory. - A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentiall...

Mozilla Firefox Security Advisory (MFSA2025-25) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-25. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js Thi...

The vulnerability of the Mozilla Firefox browser, related to insufficient protection of service data, allows attackers to disclose protected information.

The vulnerability of the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

[SECURITY] Fedora 42 Update: firefox-137.0-2.fc42

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

MozillaFirefox-137.0-1.1 on GA media (moderate)

MozillaFirefox-137.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14971-1 Rating: moderate Cross-References: CVE-2025-3028 CVE-2025-3029 CVE-2025-3030 CVE-2025-3031 CVE-2025-3032 CVE-2025-3033 CVE-2025-3034 CVE-2025-3035 CVSS scores: CVE-2025-3028 SUSE : 6.5...

OPENSUSE-SU-2025:14971-1 MozillaFirefox-137.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-137.0-1.1 package on the GA media of openSUSE Tumbleweed...

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...