RHSA-2026:0013

security update for firefox

view advisory published 2026-01-05

security update for firefox

describes (10)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-14333US	high8.1	0.44% (38th)	—	2025-12-09
Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that…
CVE-2025-14331US	medium6.5	0.19% (8th)	—	2025-12-09
Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 14…
CVE-2025-14330US	critical9.8	0.51% (43rd)	—	2025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14329US	—	0.40% (34th)	—	2025-12-09
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14328US	—	0.40% (34th)	—	2025-12-09
Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14325US	—	0.34% (28th)	Exploit	2025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.
CVE-2025-14324US	critical9.8	0.56% (47th)	—	2025-12-09
JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140…
CVE-2025-14323US	—	0.41% (36th)	—	2025-12-09
Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6…
CVE-2025-14322US	—	0.34% (27th)	—	2025-12-09
Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thun…
CVE-2025-14321US	critical9.8	0.60% (48th)	Exploit	2025-12-09
Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

references

External citations — patches, advisories, analysis.

remediations (20)

Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Fixedfirefox-x11-0:140.6.0-2.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan