Mozilla Firefox < 137.0.2

The version of Firefox installed on the remote Windows host is prior to 137.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-25 advisory. - A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentially leading ...

Mozilla Firefox < 137.0.2

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 137.0.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2025-25 advisory. - A race condition existed in nsHttpTransaction that could have been exploited to cause memory corruption, potentiall...

Mozilla Firefox Security Advisory (MFSA2025-25) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-25. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

Exploit for Improper Check for Unusual or Exceptional Conditions in Mozilla Firefox

🚨 CVE-2024-4367: Arbitrary JavaScript Execution in PDF.js Thi...

The vulnerability of the Mozilla Firefox browser, related to insufficient protection of service data, allows attackers to disclose protected information.

The vulnerability of the Mozilla Firefox browser is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...

[SECURITY] Fedora 42 Update: firefox-137.0-2.fc42

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

MozillaFirefox-137.0-1.1 on GA media (moderate)

MozillaFirefox-137.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:14971-1 Rating: moderate Cross-References: CVE-2025-3028 CVE-2025-3029 CVE-2025-3030 CVE-2025-3031 CVE-2025-3032 CVE-2025-3033 CVE-2025-3034 CVE-2025-3035 CVSS scores: CVE-2025-3028 SUSE : 6.5...

OPENSUSE-SU-2025:14971-1 MozillaFirefox-137.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-137.0-1.1 package on the GA media of openSUSE Tumbleweed...

firefox: thunderbird: Use-after-free triggered by XSLTProcessor

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: JavaScript code running while transforming a document with the XSLTProcessor could lead to a use-after-free...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

openSUSE Security Advisory (SUSE-SU-2025:1138-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 9 : firefox (RHSA-2025:3556)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:3556 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

FreeBSD : Mozilla -- Memory corruption bug (1205eccf-116d-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 1205eccf-116d-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: Memory safety bugs present in Firefox 133, Thunderbird 133, Firefox ESR...

SUSE SLED15: MozillaFirefox / MozillaFirefox-branding-upstream / etc (SUSE-SU-2025:1138-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1138-1 advisory. - Firefox Extended Support Release 128.9.0 ESR MFSA 2025-22 bsc1240083: CVE-2025-3028:...

SUSE-SU-2025:1138-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.9.0 ESR MFSA 2025-22 bsc1240083: CVE-2025-3028: Use-after-free triggered by XSLTProcessor CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3030: Memory safety bugs fixed in...

firefox: thunderbird: Memory safety bugs fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs present in Firefox 136, Thunderbird 136, Firefox ESR 128.8, and Thunderbird 128.8. Some of these bugs showed evidence of memory corruption, and we presume that with enough...

[SECURITY] Fedora 40 Update: firefox-137.0-2.fc40

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2025:1103-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:1103-1 advisory. - Firefox Extended Support Release 128.9.0 ESR MFSA 2025-22 bsc1240083: CVE-2025-3028: Use-after-free triggered by XSLTProcessor CVE-2025-3029:...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3029 firefox: thunderbird: Use-after-free triggered by XSLTProcessor CVE-2025-3028 firefox...

SUSE-SU-2025:1103-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: - Firefox Extended Support Release 128.9.0 ESR MFSA 2025-22 bsc1240083: CVE-2025-3028: Use-after-free triggered by XSLTProcessor CVE-2025-3029: URL Bar Spoofing via non-BMP Unicode characters CVE-2025-3030: Memory safety bugs fixed in...