Critical Security Update for Firefox: Multiple Vulnerabilities Addressed
Summary
RLSA-2026:67129: Important: firefox security update. Affects firefox versions < 0:140.15.0-1.el10_2. Fixed in 0:140.15.0-1.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely-used open-source web browser known for its commitment to standards compliance, performance, and portability. It offers users a secure browsing experience with features such as tabbed browsing, spell checking, and a customizable interface. However, like any software, it is susceptible to vulnerabilities that can compromise user security and privacy.
Vulnerability Detail
The vulnerabilities in question include privilege escalation and sandbox escape issues that arise from use-after-free errors in various components of Firefox. These vulnerabilities can allow attackers to execute arbitrary code, potentially leading to unauthorized access to sensitive information or system resources. The identified CVEs highlight critical weaknesses in the DOM, Audio/Video, and Graphics components, which could be exploited by malicious actors to gain elevated privileges or escape from the browser's security sandbox.
How To Fix
Minimum fixed version
0:140.15.0-1.el10_2
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can limit the use of Firefox for sensitive activities until the update is applied. Additionally, disabling certain features such as JavaScript may reduce the risk of exploitation, but this may affect the browser's functionality.
Conclusion
In summary, the recent security update for Mozilla Firefox addresses critical vulnerabilities that could lead to privilege escalation and sandbox escape. Users are strongly encouraged to update their browsers to the latest version to ensure their security and privacy while browsing. Utilizing tools like Vulert can help monitor for such vulnerabilities in real-time.
See every vulnerability recorded for firefox →
FAQ
The update addresses multiple vulnerabilities including privilege escalation and sandbox escape issues due to use-after-free errors in various components.
You can check your Firefox version by navigating to 'Help' > 'About Firefox'. Compare it with the patched version mentioned in the update.
The CVSS score for these vulnerabilities is 7.5, indicating a high level of severity.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file. You can check your application for vulnerabilities without signing up at the Vulert playground.
If you cannot update immediately, consider using alternative browsers for sensitive tasks and disable features like JavaScript to minimize risk.
References
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
