Critical Security Update for Mozilla Firefox: Multiple Vulnerabilities Addressed
Summary
ALSA-2025:23034: Important: firefox security update. Affects firefox versions < 140.6.0-1.el9_7.alma.1. Fixed in 140.6.0-1.el9_7.alma.1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely-used open-source web browser known for its commitment to standards compliance, performance, and user privacy. It supports a variety of web technologies and is available across multiple platforms. However, like any software, it is susceptible to vulnerabilities that can compromise user security and privacy. The recent security update addresses several critical vulnerabilities that could potentially allow attackers to exploit the browser and gain unauthorized access to user data or system resources.
Vulnerability Detail
The vulnerabilities identified in this update include memory safety bugs, use-after-free errors, privilege escalation issues, and same-origin policy bypasses. These vulnerabilities stem from flaws in various components of Firefox, such as the WebRTC signaling, JavaScript engine, and graphics handling. If exploited, these vulnerabilities could lead to unauthorized access, data leakage, or even complete system compromise. The specific CVEs associated with these vulnerabilities include CVE-2025-14321, CVE-2025-14322, CVE-2025-14323, CVE-2025-14324, CVE-2025-14325, CVE-2025-14328, CVE-2025-14329, CVE-2025-14330, CVE-2025-14331, and CVE-2025-14333.
How To Fix
Minimum fixed version
140.6.0-1.el9_7.alma.1
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can disable certain features that may be exploited until the update is applied. For example, disabling WebRTC can mitigate risks associated with the use-after-free vulnerability. This can usually be done in the browser settings or through configuration files.
Conclusion
The recent security update for Mozilla Firefox addresses critical vulnerabilities that could pose significant risks to users. It is essential to update to the latest version to protect against potential exploits. Users are encouraged to follow the outlined steps to ensure their browser remains secure.
See every vulnerability recorded for firefox →
FAQ
The update addresses multiple vulnerabilities including memory safety bugs, use-after-free errors, privilege escalation, and same-origin policy bypasses.
You can check your Firefox version by going to the 'About Firefox' section in the menu. Compare it with the patched version 140.6.0-1.el9_7.alma.1.
If an immediate update is not possible, consider disabling features like WebRTC to reduce the risk of exploitation until you can apply the update.
Detailed information about the vulnerabilities can be found on the respective CVE pages linked in the security advisory.
Vulert monitors open-source vulnerabilities in your software using a manifest file like package-lock.json, providing real-time alerts without requiring code access.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
