Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox Update Fixes Security Flaw

published 1 year ago

Summary

Firefox users are advised to update their browser to fix a security flaw that could allow hackers to take control of their computer. This update is essential for protecting against potential attacks. Users should update their Firefox browser as soon as possible.

What to do

Update redhat firefox to version 0:140.3.0-1.el8_8.
Update redhat firefox-debuginfo to version 0:140.3.0-1.el8_8.
Update redhat firefox-debugsource to version 0:140.3.0-1.el8_8.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_e4s:8.8::appstream	redhat	firefox	< 0:140.3.0-1.el8_8 Fix: upgrade to 0:140.3.0-1.el8_8
Red Hat:rhel_e4s:8.8::appstream	redhat	firefox-debuginfo	< 0:140.3.0-1.el8_8 Fix: upgrade to 0:140.3.0-1.el8_8
Red Hat:rhel_e4s:8.8::appstream	redhat	firefox-debugsource	< 0:140.3.0-1.el8_8 Fix: upgrade to 0:140.3.0-1.el8_8
Red Hat:rhel_tus:8.8::appstream	redhat	firefox	< 0:140.3.0-1.el8_8 Fix: upgrade to 0:140.3.0-1.el8_8
Red Hat:rhel_tus:8.8::appstream	redhat	firefox-debuginfo	< 0:140.3.0-1.el8_8 Fix: upgrade to 0:140.3.0-1.el8_8
Red Hat:rhel_tus:8.8::appstream	redhat	firefox-debugsource	< 0:140.3.0-1.el8_8 Fix: upgrade to 0:140.3.0-1.el8_8

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2025:17368 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395745 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395754 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395755 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395756 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395759 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395764 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2395766 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17368.... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2024-12224 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2369303 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2024-12224 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2024-12224 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1887898 Third Party Advisory
https://rustsec.org/advisories/RUSTSEC-2024-0421.html Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10527 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10527 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10527 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10527 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10527 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10528 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10528 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10528 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10528 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10528 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10529 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10529 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10529 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10529 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10529 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10532 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10532 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10532 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10532 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10532 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10533 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10533 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10533 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10533 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10533 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10536 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10536 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10536 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10536 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10536 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-10537 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-10537 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-10537 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-75/#CVE-2025-10537 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-78/#CVE-2025-10537 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published7 Oct 2025

Updated31 Jul 2026

First seen31 Jul 2026

Sources

RHSA-2025:17368 · OSV

Track software like this

Free during beta