Critical Security Update for Firefox: Multiple Vulnerabilities Addressed
Summary
RHSA-2026:83077: Red Hat Security Advisory: firefox security update. Affects firefox versions < 0:140.16.0-1.el9_4. Fixed in 0:140.16.0-1.el9_4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Firefox is a widely used open-source web browser developed by Mozilla. It is known for its speed, privacy features, and extensive add-ons. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and data integrity. The recent security advisory highlights several vulnerabilities that could potentially affect users of Firefox and its related packages.
Vulnerability Detail
The vulnerabilities identified in this advisory include multiple CVEs (Common Vulnerabilities and Exposures) ranging from CVE-2026-92005 to CVE-2026-92032. These vulnerabilities could allow attackers to execute arbitrary code, leading to unauthorized access to user data, system compromise, or denial of service. The vulnerabilities stem from flaws in the browser's handling of web content and memory management, which can be exploited through malicious websites or crafted content.
How To Fix
Minimum fixed version
0:140.16.0-1.el9_4
This is the first release that contains the fix.
sudo dnf update firefoxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable JavaScript in their browser settings to mitigate the risk of exploitation until the update is applied. This can be done by navigating to 'Settings' > 'Privacy & Security' > 'Permissions' and unchecking 'Enable JavaScript'. However, this may affect the functionality of many websites.
Conclusion
In summary, the recent Red Hat Security Advisory highlights critical vulnerabilities in Firefox that require immediate attention. Users are strongly encouraged to update their installations to the latest patched version to ensure their security. Additionally, utilizing tools like Vulert can help monitor for future vulnerabilities.
See every vulnerability recorded for firefox →
FAQ
The advisory addresses multiple vulnerabilities identified as CVE-2026-92005 through CVE-2026-92032, which could lead to arbitrary code execution and data compromise.
You can check your version of Firefox by navigating to 'Help' > 'About Firefox'. Compare your version with the patched version 0:140.16.0-1.el9_4.
Yes, you can use Vulert, which monitors and alerts for open-source vulnerabilities in your software using a manifest file like package-lock.json. You can check your application for vulnerabilities without signup at the Vulert playground.
If you cannot update immediately, consider disabling JavaScript as a temporary workaround to reduce the risk of exploitation.
The CVSS score for this vulnerability is 7.5, indicating a high severity level.
Related vulnerabilities
Recent vulnerabilities recorded for firefox.
