Critical Security Update for Firefox: Addressing Multiple Vulnerabilities
Summary
ALSA-2025:23035: Important: firefox security update. Affects firefox versions < 140.6.0-1.el10_1. Fixed in 140.6.0-1.el10_1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Mozilla Firefox is a widely-used open-source web browser known for its commitment to standards compliance, performance, and portability. It supports various web technologies and is designed to provide a secure browsing experience. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and privacy.
Vulnerability Detail
The vulnerabilities in this update include memory safety bugs, use-after-free errors, privilege escalation issues, and JIT miscompilations in the JavaScript engine. These vulnerabilities can lead to severe consequences such as unauthorized access, data leaks, and potential system compromise. Specifically, the use-after-free vulnerability in the WebRTC signaling component (CVE-2025-14321) and privilege escalation in the Netmonitor component (CVE-2025-14328, CVE-2025-14329) are particularly concerning as they can allow attackers to gain elevated privileges and execute arbitrary code.
How To Fix
Minimum fixed version
140.6.0-1.el10_1
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate updating is not possible, users are advised to limit their use of Firefox for sensitive activities until the update can be applied. Additionally, consider using alternative browsers that are not affected by these vulnerabilities.
Conclusion
The recent security update for Firefox addresses critical vulnerabilities that could potentially compromise user security. It is essential for users to update their browsers to the latest version to mitigate these risks. By staying informed and proactive, users can maintain a secure browsing experience.
See every vulnerability recorded for firefox →
FAQ
The update addresses multiple vulnerabilities including memory safety bugs, use-after-free errors, and privilege escalation issues.
You can check your Firefox version by navigating to 'Help' > 'About Firefox'. Compare it with the patched version 140.6.0-1.el10_1.
Limit your use of Firefox for sensitive tasks and consider using alternative browsers until you can update.
Detailed information can be found on the CVE pages linked in the advisory, which provide insights into the impact and technical details.
Vulert monitors open-source vulnerabilities in your software by analyzing a manifest file like package-lock.json, alerting you in real-time without requiring code access.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
