Critical Security Update for Firefox: Addressing Multiple Vulnerabilities
Summary
ALSA-2026:19160: Important: firefox security update. Affects firefox versions < 140.10.2-1.el10_2. Fixed in 140.10.2-1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely-used open-source web browser known for its commitment to standards compliance, performance, and portability. It supports a variety of web technologies and is designed to provide a secure browsing experience. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and privacy.
Vulnerability Detail
The vulnerabilities identified in this update include a use-after-free issue in the DOM Networking component (CVE-2026-8090), memory safety bugs affecting multiple versions of Firefox (CVE-2026-8092), and an issue in the WebRTC component (CVE-2026-8094). These vulnerabilities can lead to potential crashes, data corruption, or unauthorized access to sensitive information, posing significant risks to users.
How To Fix
Minimum fixed version
140.10.2-1.el10_2
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for these vulnerabilities. The best course of action is to update to the latest version of Firefox as outlined in the 'how_to_fix' section.
Conclusion
In summary, the recent security update for Mozilla Firefox addresses critical vulnerabilities that could potentially compromise user security. It is essential for users to update their Firefox installations to the latest version to mitigate these risks effectively.
See every vulnerability recorded for firefox →
FAQ
The update addresses a use-after-free vulnerability in the DOM Networking component, memory safety bugs, and an issue in the WebRTC component.
You can check your Firefox version by navigating to 'Help' > 'About Firefox'. If your version is older than 140.10.2-1.el10_2, it is affected.
While there are no specific workarounds, it is advisable to minimize sensitive activities until you can apply the update.
More details can be found on the CVE pages linked in the advisory or on the Mozilla security advisories page.
Vulert monitors and alerts for open-source vulnerabilities in your software using just a manifest file like package-lock.json, providing real-time insights without requiring code access.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
