Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox: Unpatched Vulnerability Allows Malicious Code to Run

published 1 year ago

Summary

A security update is available for Firefox. If left unpatched, attackers could use this vulnerability to run malicious code on your computer. You should update your Firefox browser to the latest version to protect your system.

What to do

Update redhat firefox to version 0:128.8.0-1.el9_2.
Update redhat firefox-debuginfo to version 0:128.8.0-1.el9_2.
Update redhat firefox-debugsource to version 0:128.8.0-1.el9_2.
Update redhat firefox-x11 to version 0:128.8.0-1.el9_2.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_eus:9.2::appstream	redhat	firefox	< 0:128.8.0-1.el9_2 Fix: upgrade to 0:128.8.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream	redhat	firefox-debuginfo	< 0:128.8.0-1.el9_2 Fix: upgrade to 0:128.8.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream	redhat	firefox-debugsource	< 0:128.8.0-1.el9_2 Fix: upgrade to 0:128.8.0-1.el9_2
Red Hat:rhel_eus:9.2::appstream	redhat	firefox-x11	< 0:128.8.0-1.el9_2 Fix: upgrade to 0:128.8.0-1.el9_2

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2025:2480 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349786 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349787 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349790 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349792 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349793 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349794 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349795 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349796 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2349797 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_2480.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-1930 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1930 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1930 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1902309 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-14/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-15/ Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-16/ Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1931 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1931 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1931 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1944126 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1932 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1932 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1932 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1944313 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1933 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1933 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1933 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1946004 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1934 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1934 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1934 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1942881 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1935 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1935 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1935 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1866661 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1936 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1936 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1936 Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1940027 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1937 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1937 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1937 Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1938471%2C1940716 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-1938 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-1938 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-1938 Vendor Advisory
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1922889%2C1935004%2C1943586%2C19... Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

8.8 High

Timeline

Published10 Mar 2025

Updated27 Mar 2026

First seen27 Mar 2026

Sources

RHSA-2025:2480 · OSV

Track software like this

Free during beta