Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Firefox Security Update Fixes Critical Vulnerability

published 10 months ago

Summary

Firefox has released a security update to fix a critical vulnerability that could allow hackers to execute malicious code on your system. This update is recommended for all Firefox users to protect against potential attacks. Update your Firefox browser as soon as possible to ensure you have the latest security patches.

What to do

Update redhat firefox to version 0:140.6.0-1.el9_4.
Update redhat firefox-debuginfo to version 0:140.6.0-1.el9_4.
Update redhat firefox-debugsource to version 0:140.6.0-1.el9_4.
Update redhat firefox-x11 to version 0:140.6.0-1.el9_4.

Affected software

Ecosystem	Vendor	Product	Affected versions
Red Hat:rhel_eus:9.4::appstream	redhat	firefox	< 0:140.6.0-1.el9_4 Fix: upgrade to 0:140.6.0-1.el9_4
Red Hat:rhel_eus:9.4::appstream	redhat	firefox-debuginfo	< 0:140.6.0-1.el9_4 Fix: upgrade to 0:140.6.0-1.el9_4
Red Hat:rhel_eus:9.4::appstream	redhat	firefox-debugsource	< 0:140.6.0-1.el9_4 Fix: upgrade to 0:140.6.0-1.el9_4
Red Hat:rhel_eus:9.4::appstream	redhat	firefox-x11	< 0:140.6.0-1.el9_4 Fix: upgrade to 0:140.6.0-1.el9_4

Original advisory text

Red Hat Security Advisory: firefox security update

References

https://access.redhat.com/errata/RHSA-2026:0016 Vendor Advisory
https://access.redhat.com/security/updates/classification/#important Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420502 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420503 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420504 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420506 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420508 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420509 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420512 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420513 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420516 Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2420517 Third Party Advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0016.j... Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-14321 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14321 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14321 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14321 Third Party Advisory
https://www.mozilla.org/security/advisories/mfsa2025-96/#CVE-2025-14321 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14322 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14322 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14322 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14322 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14323 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14323 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14323 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14323 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14324 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14324 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14324 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14324 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14325 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14325 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14325 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14325 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14328 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14328 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14328 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14328 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14329 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14329 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14329 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14329 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14330 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14330 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14330 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14330 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14331 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14331 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14331 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14331 Third Party Advisory
https://access.redhat.com/security/cve/CVE-2025-14333 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2025-14333 Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-14333 Vendor Advisory
https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14333 Third Party Advisory

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker full control (estimated)

Severity

7.5 High

Timeline

Published5 Jan 2026

Updated4 Jul 2026

First seen4 Jul 2026

Sources

RHSA-2026:0016 · OSV

Track software like this

Free during beta