Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox Security Update: Critical Vulnerability in Browser

published 5 months ago

Summary

A critical security vulnerability has been discovered in the Firefox browser, which could allow attackers to execute malicious code on a user's computer. This update addresses the issue and is recommended for all Firefox users to install to ensure their security. If you use Firefox, update to the latest version as soon as possible.

What to do

Update redhat firefox to version 0:140.10.0-1.el9_0.
Update redhat firefox-debuginfo to version 0:140.10.0-1.el9_0.
Update redhat firefox-debugsource to version 0:140.10.0-1.el9_0.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:9.0::appstream	redhat	firefox	< 0:140.10.0-1.el9_0 Fix: upgrade to 0:140.10.0-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	firefox-debuginfo	< 0:140.10.0-1.el9_0 Fix: upgrade to 0:140.10.0-1.el9_0
Red Hat:rhel_e4s:9.0::appstream	redhat	firefox-debugsource	< 0:140.10.0-1.el9_0 Fix: upgrade to 0:140.10.0-1.el9_0

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2026:17687 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460074 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460075 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460076 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460078 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460079 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460085 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460086 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460088 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460092 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460094 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460095 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460096 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460097 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460099 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460101 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460102 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460103 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460104 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460105 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460106 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460107 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460108 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460109 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460110 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2460112 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_17687.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-6746 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6746 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6746 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6746 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6746 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6747 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6747 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6747 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6747 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6747 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6748 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6748 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6748 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6748 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6748 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6749 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6749 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6749 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6749 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6749 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6750 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6750 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6750 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6750 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6750 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6751 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6751 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6751 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6751 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6751 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6752 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6752 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6752 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6752 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6752 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6753 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6753 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6753 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6753 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6753 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6754 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6754 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6754 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6754 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6754 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6757 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6757 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6757 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6757 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6757 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6759 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6759 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6759 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6759 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6759 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6761 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6761 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6761 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6761 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6761 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6762 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6762 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6762 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6762 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6762 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6763 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6763 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6763 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6763 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6763 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6764 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6764 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6764 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6764 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6764 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6765 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6765 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6765 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6765 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6765 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6766 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6766 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6766 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6766 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6766 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6767 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6767 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6767 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6767 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6767 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6769 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6769 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6769 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6769 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6769 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6770 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6770 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6770 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6770 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6770 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6771 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6771 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6771 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6771 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6771 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6772 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6772 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6772 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6772 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6772 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6776 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6776 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6776 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6776 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6776 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6785 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6785 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6785 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6785 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6785 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2026-6786 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2026-6786 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-6786 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2026-32/#CVE-2026-6786 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2026-34/#CVE-2026-6786 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published15 May 2026

Updated21 May 2026

First seen21 May 2026

Sources

RHSA-2026:17687 · OSV

Track software like this

Free during beta