Vulnerability-Lookup

RHSA-2026:0016

Vulnerability from csaf_redhat - Published: 2026-01-05 02:09 - Updated: 2026-10-16 10:58

Summary

Red Hat Security Advisory: firefox security update

Severity

Important

Notes

Topic: An update for firefox is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fix(es): * firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333) * firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325) * firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328) * firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329) * firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331) * firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330) * firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2025-14321

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-416 - Use After Free

Affected products

Fixed 17 products

Product	Version	Remediation
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x	—	Vendor Fix fix Workaround
Unresolved product id: AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64	—	Vendor Fix fix Workaround

Threats

Impact Important

CVE-2025-14322

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Important

CVE-2025-14323

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Notifications component.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-266 - Incorrect Privilege Assignment

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Important

CVE-2025-14324

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Important

CVE-2025-14325

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Important

CVE-2025-14328

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Netmonitor component.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Moderate

CVE-2025-14329

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the Netmonitor component.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Moderate

CVE-2025-14330

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Moderate

CVE-2025-14331

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the Request Handling component.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-346 - Origin Validation Error

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Moderate

CVE-2025-14333

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Memory safety bugs. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

6.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected products

Fixed 17 products, the same list as for CVE-2025-14321

Threats

Impact Moderate

References

64 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:0016	self
https://access.redhat.com/security/updates/classi…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420502	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420503	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420504	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420506	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420508	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420509	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420512	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420513	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420516	external
https://bugzilla.redhat.com/show_bug.cgi?id=2420517	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2025-14321	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420503	external
https://www.cve.org/CVERecord?id=CVE-2025-14321	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14321	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14322	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420506	external
https://www.cve.org/CVERecord?id=CVE-2025-14322	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14322	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14323	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420513	external
https://www.cve.org/CVERecord?id=CVE-2025-14323	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14323	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14324	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420517	external
https://www.cve.org/CVERecord?id=CVE-2025-14324	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14324	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14325	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420504	external
https://www.cve.org/CVERecord?id=CVE-2025-14325	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14325	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14328	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420508	external
https://www.cve.org/CVERecord?id=CVE-2025-14328	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14328	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14329	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420509	external
https://www.cve.org/CVERecord?id=CVE-2025-14329	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14329	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14330	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420516	external
https://www.cve.org/CVERecord?id=CVE-2025-14330	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14330	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14331	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420512	external
https://www.cve.org/CVERecord?id=CVE-2025-14331	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14331	external
https://www.mozilla.org/security/advisories/mfsa2…	external
https://access.redhat.com/security/cve/CVE-2025-14333	self
https://bugzilla.redhat.com/show_bug.cgi?id=2420502	external
https://www.cve.org/CVERecord?id=CVE-2025-14333	external
https://nvd.nist.gov/vuln/detail/CVE-2025-14333	external
https://www.mozilla.org/security/advisories/mfsa2…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "An update for firefox is now available for Red Hat Enterprise Linux 9.4 Extended Update Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.\n\nSecurity Fix(es):\n\n* firefox: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146 (CVE-2025-14333)\n\n* firefox: Use-after-free in the WebRTC: Signaling component (CVE-2025-14321)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14325)\n\n* firefox: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component (CVE-2025-14322)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2025-14328)\n\n* firefox: Privilege escalation in the Netmonitor component (CVE-2025-14329)\n\n* firefox: Same-origin policy bypass in the Request Handling component (CVE-2025-14331)\n\n* firefox: Privilege escalation in the DOM: Notifications component (CVE-2025-14323)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14330)\n\n* firefox: JIT miscompilation in the JavaScript Engine: JIT component (CVE-2025-14324)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:0016",
        "url": "https://access.redhat.com/errata/RHSA-2026:0016"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#important",
        "url": "https://access.redhat.com/security/updates/classification/#important"
      },
      {
        "category": "external",
        "summary": "2420502",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420502"
      },
      {
        "category": "external",
        "summary": "2420503",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420503"
      },
      {
        "category": "external",
        "summary": "2420504",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420504"
      },
      {
        "category": "external",
        "summary": "2420506",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420506"
      },
      {
        "category": "external",
        "summary": "2420508",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420508"
      },
      {
        "category": "external",
        "summary": "2420509",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420509"
      },
      {
        "category": "external",
        "summary": "2420512",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420512"
      },
      {
        "category": "external",
        "summary": "2420513",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420513"
      },
      {
        "category": "external",
        "summary": "2420516",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420516"
      },
      {
        "category": "external",
        "summary": "2420517",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420517"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0016.json"
      }
    ],
    "title": "Red Hat Security Advisory: firefox security update",
    "tracking": {
      "current_release_date": "2026-10-16T10:58:05+00:00",
      "generator": {
        "date": "2026-10-16T10:58:05+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.4.2"
        }
      },
      "id": "RHSA-2026:0016",
      "initial_release_date": "2026-01-05T02:09:38+00:00",
      "revision_history": [
        {
          "date": "2026-01-05T02:09:38+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-01-05T02:09:38+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-10-16T10:58:05+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                "product": {
                  "name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
                  "product_id": "AppStream-9.4.0.Z.EUS",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:140.6.0-1.el9_4.src",
                "product": {
                  "name": "firefox-0:140.6.0-1.el9_4.src",
                  "product_id": "firefox-0:140.6.0-1.el9_4.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@140.6.0-1.el9_4?arch=src"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:140.6.0-1.el9_4.aarch64",
                "product": {
                  "name": "firefox-0:140.6.0-1.el9_4.aarch64",
                  "product_id": "firefox-0:140.6.0-1.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@140.6.0-1.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-x11-0:140.6.0-1.el9_4.aarch64",
                "product": {
                  "name": "firefox-x11-0:140.6.0-1.el9_4.aarch64",
                  "product_id": "firefox-x11-0:140.6.0-1.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-x11@140.6.0-1.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
                "product": {
                  "name": "firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
                  "product_id": "firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debugsource@140.6.0-1.el9_4?arch=aarch64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
                "product": {
                  "name": "firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
                  "product_id": "firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@140.6.0-1.el9_4?arch=aarch64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:140.6.0-1.el9_4.ppc64le",
                "product": {
                  "name": "firefox-0:140.6.0-1.el9_4.ppc64le",
                  "product_id": "firefox-0:140.6.0-1.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@140.6.0-1.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-x11-0:140.6.0-1.el9_4.ppc64le",
                "product": {
                  "name": "firefox-x11-0:140.6.0-1.el9_4.ppc64le",
                  "product_id": "firefox-x11-0:140.6.0-1.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-x11@140.6.0-1.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
                "product": {
                  "name": "firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
                  "product_id": "firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debugsource@140.6.0-1.el9_4?arch=ppc64le"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
                "product": {
                  "name": "firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
                  "product_id": "firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@140.6.0-1.el9_4?arch=ppc64le"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:140.6.0-1.el9_4.x86_64",
                "product": {
                  "name": "firefox-0:140.6.0-1.el9_4.x86_64",
                  "product_id": "firefox-0:140.6.0-1.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@140.6.0-1.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-x11-0:140.6.0-1.el9_4.x86_64",
                "product": {
                  "name": "firefox-x11-0:140.6.0-1.el9_4.x86_64",
                  "product_id": "firefox-x11-0:140.6.0-1.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-x11@140.6.0-1.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
                "product": {
                  "name": "firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
                  "product_id": "firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debugsource@140.6.0-1.el9_4?arch=x86_64"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
                "product": {
                  "name": "firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
                  "product_id": "firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@140.6.0-1.el9_4?arch=x86_64"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "firefox-0:140.6.0-1.el9_4.s390x",
                "product": {
                  "name": "firefox-0:140.6.0-1.el9_4.s390x",
                  "product_id": "firefox-0:140.6.0-1.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox@140.6.0-1.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-x11-0:140.6.0-1.el9_4.s390x",
                "product": {
                  "name": "firefox-x11-0:140.6.0-1.el9_4.s390x",
                  "product_id": "firefox-x11-0:140.6.0-1.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-x11@140.6.0-1.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debugsource-0:140.6.0-1.el9_4.s390x",
                "product": {
                  "name": "firefox-debugsource-0:140.6.0-1.el9_4.s390x",
                  "product_id": "firefox-debugsource-0:140.6.0-1.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debugsource@140.6.0-1.el9_4?arch=s390x"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
                "product": {
                  "name": "firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
                  "product_id": "firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/firefox-debuginfo@140.6.0-1.el9_4?arch=s390x"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:140.6.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64"
        },
        "product_reference": "firefox-0:140.6.0-1.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:140.6.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le"
        },
        "product_reference": "firefox-0:140.6.0-1.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:140.6.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x"
        },
        "product_reference": "firefox-0:140.6.0-1.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:140.6.0-1.el9_4.src as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src"
        },
        "product_reference": "firefox-0:140.6.0-1.el9_4.src",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-0:140.6.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64"
        },
        "product_reference": "firefox-0:140.6.0-1.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:140.6.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64"
        },
        "product_reference": "firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le"
        },
        "product_reference": "firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:140.6.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x"
        },
        "product_reference": "firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debuginfo-0:140.6.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64"
        },
        "product_reference": "firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource-0:140.6.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64"
        },
        "product_reference": "firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource-0:140.6.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le"
        },
        "product_reference": "firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource-0:140.6.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x"
        },
        "product_reference": "firefox-debugsource-0:140.6.0-1.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-debugsource-0:140.6.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64"
        },
        "product_reference": "firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11-0:140.6.0-1.el9_4.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64"
        },
        "product_reference": "firefox-x11-0:140.6.0-1.el9_4.aarch64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11-0:140.6.0-1.el9_4.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le"
        },
        "product_reference": "firefox-x11-0:140.6.0-1.el9_4.ppc64le",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11-0:140.6.0-1.el9_4.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x"
        },
        "product_reference": "firefox-x11-0:140.6.0-1.el9_4.s390x",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "firefox-x11-0:140.6.0-1.el9_4.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
          "product_id": "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        },
        "product_reference": "firefox-x11-0:140.6.0-1.el9_4.x86_64",
        "relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14321",
      "cwe": {
        "id": "CWE-416",
        "name": "Use After Free"
      },
      "discovery_date": "2025-12-09T14:01:16.947968+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420503"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: Use-after-free in the WebRTC: Signaling component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Use-after-free in the WebRTC: Signaling component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14321"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420503",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420503"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14321",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14321"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14321",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14321"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14321",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14321"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-96/#CVE-2025-14321",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/#CVE-2025-14321"
        }
      ],
      "release_date": "2025-12-09T13:37:53.872000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: Use-after-free in the WebRTC: Signaling component"
    },
    {
      "cve": "CVE-2025-14322",
      "cwe": {
        "id": "CWE-754",
        "name": "Improper Check for Unusual or Exceptional Conditions"
      },
      "discovery_date": "2025-12-09T14:01:29.935806+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420506"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14322"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420506",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420506"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14322",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14322"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14322",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14322"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14322",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14322"
        }
      ],
      "release_date": "2025-12-09T13:37:55.159000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component"
    },
    {
      "cve": "CVE-2025-14323",
      "cwe": {
        "id": "CWE-266",
        "name": "Incorrect Privilege Assignment"
      },
      "discovery_date": "2025-12-09T14:01:56.819188+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420513"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: Privilege escalation in the DOM: Notifications component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Privilege escalation in the DOM: Notifications component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14323"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420513",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420513"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14323",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14323"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14323",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14323"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14323",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14323"
        }
      ],
      "release_date": "2025-12-09T13:37:56.358000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: Privilege escalation in the DOM: Notifications component"
    },
    {
      "cve": "CVE-2025-14324",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2025-12-09T14:02:13.907350+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420517"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14324"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420517",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420517"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14324",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14324"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14324",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14324"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14324",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14324"
        }
      ],
      "release_date": "2025-12-09T13:37:57.533000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component"
    },
    {
      "cve": "CVE-2025-14325",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2025-12-09T14:01:21.395823+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420504"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14325"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420504",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420504"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14325",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14325"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14325",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14325"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14325",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14325"
        }
      ],
      "release_date": "2025-12-09T13:37:58.843000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component"
    },
    {
      "cve": "CVE-2025-14328",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2025-12-09T14:01:37.581314+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420508"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: Privilege escalation in the Netmonitor component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Privilege escalation in the Netmonitor component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14328"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420508",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420508"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14328",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14328"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14328",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14328"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14328",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14328"
        }
      ],
      "release_date": "2025-12-09T13:38:03.509000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "firefox: thunderbird: Privilege escalation in the Netmonitor component"
    },
    {
      "cve": "CVE-2025-14329",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2025-12-09T14:01:41.422249+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420509"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: Privilege escalation in the Netmonitor component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Privilege escalation in the Netmonitor component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14329"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420509",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420509"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14329",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14329"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14329",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14329"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14329",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14329"
        }
      ],
      "release_date": "2025-12-09T13:38:04.796000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "firefox: thunderbird: Privilege escalation in the Netmonitor component"
    },
    {
      "cve": "CVE-2025-14330",
      "cwe": {
        "id": "CWE-843",
        "name": "Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)"
      },
      "discovery_date": "2025-12-09T14:02:06.483609+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420516"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: JIT miscompilation in the JavaScript Engine: JIT component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14330"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420516",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420516"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14330",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14330"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14330",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14330"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14330",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14330"
        }
      ],
      "release_date": "2025-12-09T13:38:05.995000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "firefox: thunderbird: JIT miscompilation in the JavaScript Engine: JIT component"
    },
    {
      "cve": "CVE-2025-14331",
      "cwe": {
        "id": "CWE-346",
        "name": "Origin Validation Error"
      },
      "discovery_date": "2025-12-09T14:01:52.885863+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420512"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue: Same-origin policy bypass in the Request Handling component.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Same-origin policy bypass in the Request Handling component",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14331"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420512",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420512"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14331",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14331"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14331",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14331"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14331",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14331"
        }
      ],
      "release_date": "2025-12-09T13:38:07.191000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "firefox: thunderbird: Same-origin policy bypass in the Request Handling component"
    },
    {
      "cve": "CVE-2025-14333",
      "cwe": {
        "id": "CWE-119",
        "name": "Improper Restriction of Operations within the Bounds of a Memory Buffer"
      },
      "discovery_date": "2025-12-09T14:01:12.194767+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2420502"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Firefox and Thunderbird. The Mozilla Foundation\u0027s Security Advisory describes the following issue:\nMemory safety bugs. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "Red Hat Product Security rates the severity of this flaw as determined by the Mozilla Foundation Security Advisory.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
          "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
          "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-14333"
        },
        {
          "category": "external",
          "summary": "RHBZ#2420502",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2420502"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-14333",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-14333"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-14333",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-14333"
        },
        {
          "category": "external",
          "summary": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14333",
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/#CVE-2025-14333"
        }
      ],
      "release_date": "2025-12-09T13:38:09.979000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-01-05T02:09:38+00:00",
          "details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:0016"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.1,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.src",
            "AppStream-9.4.0.Z.EUS:firefox-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debuginfo-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-debugsource-0:140.6.0-1.el9_4.x86_64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.aarch64",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.ppc64le",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.s390x",
            "AppStream-9.4.0.Z.EUS:firefox-x11-0:140.6.0-1.el9_4.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146"
    }
  ]
}

CVE-2025-14321 (GCVE-0-2025-14321)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:37 – Updated: 2026-04-13 14:25

Title

Use-after-free in the WebRTC: Signaling component

Summary

Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-11 19:36 UTC

CWE

CWE-416 - Use After Free

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1992760
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Igor Morgenstern

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14321",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-11T19:36:51.527373Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-416",
                "description": "CWE-416 Use After Free",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-11T20:36:32.290Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Igor Morgenstern"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Use-after-free in the WebRTC: Signaling component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:27.309Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1992760"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Use-after-free in the WebRTC: Signaling component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14321",
    "datePublished": "2025-12-09T13:37:53.872Z",
    "dateReserved": "2025-12-09T13:37:53.205Z",
    "dateUpdated": "2026-04-13T14:25:27.309Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14322 (GCVE-0-2025-14322)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:37 – Updated: 2026-04-13 14:25

Title

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component

Summary

Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

8 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-10 04:57 UTC

CWE

CWE-754 - Improper Check for Unusual or Exceptional Conditions

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

6 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1996473
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 115.31 , ≤ 115.* (rpm) Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Oskar L

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14322",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-10T04:57:18.096368Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-754",
                "description": "CWE-754 Improper Check for Unusual or Exceptional Conditions",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:08.711Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "115.*",
              "status": "unaffected",
              "version": "115.31",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Oskar L"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:29.901Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996473"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14322",
    "datePublished": "2025-12-09T13:37:55.159Z",
    "dateReserved": "2025-12-09T13:37:54.554Z",
    "dateUpdated": "2026-04-13T14:25:29.901Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14323 (GCVE-0-2025-14323)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:37 – Updated: 2026-04-13 14:25

Title

Privilege escalation in the DOM: Notifications component

Summary

Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-10 04:57 UTC

CWE

CWE-noinfo Not enough information

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

6 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1996555
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 115.31 , ≤ 115.* (rpm) Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

tiebuchen

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14323",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-10T04:57:12.450670Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:08.149Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "115.*",
              "status": "unaffected",
              "version": "115.31",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "tiebuchen"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Privilege escalation in the DOM: Notifications component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:31.606Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996555"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Privilege escalation in the DOM: Notifications component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14323",
    "datePublished": "2025-12-09T13:37:56.358Z",
    "dateReserved": "2025-12-09T13:37:55.768Z",
    "dateUpdated": "2026-04-13T14:25:31.606Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14324 (GCVE-0-2025-14324)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:37 – Updated: 2026-04-13 14:25

Title

JIT miscompilation in the JavaScript Engine: JIT component

Summary

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-11 20:01 UTC

CWE

CWE-94 - Improper Control of Generation of Code ('Code Injection')

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

6 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1996840
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 115.31 , ≤ 115.* (rpm) Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Lingming Zhang

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14324",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-11T20:01:17.895694Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-94",
                "description": "CWE-94 Improper Control of Generation of Code (\u0027Code Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-11T20:03:10.119Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "115.*",
              "status": "unaffected",
              "version": "115.31",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Lingming Zhang"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:33.489Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996840"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "JIT miscompilation in the JavaScript Engine: JIT component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14324",
    "datePublished": "2025-12-09T13:37:57.533Z",
    "dateReserved": "2025-12-09T13:37:56.958Z",
    "dateUpdated": "2026-04-13T14:25:33.489Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14325 (GCVE-0-2025-14325)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:37 – Updated: 2026-04-13 14:25

Title

JIT miscompilation in the JavaScript Engine: JIT component

Summary

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

7.3 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 17:04 UTC

CWE

CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1998050
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "LOW",
              "baseScore": 7.3,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14325",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T17:04:03.255293Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-07T15:11:20.728Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "zx"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:35.644Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1998050"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "JIT miscompilation in the JavaScript Engine: JIT component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14325",
    "datePublished": "2025-12-09T13:37:58.843Z",
    "dateReserved": "2025-12-09T13:37:58.128Z",
    "dateUpdated": "2026-04-13T14:25:35.644Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14328 (GCVE-0-2025-14328)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:38 – Updated: 2026-04-13 14:25

Title

Privilege escalation in the Netmonitor component

Summary

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-10 04:57 UTC

CWE

CWE-noinfo Not enough information

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1996761
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Ameen Basha M K

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14328",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-10T04:57:17.009184Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:07.668Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ameen Basha M K"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:37.532Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1996761"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Privilege escalation in the Netmonitor component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14328",
    "datePublished": "2025-12-09T13:38:03.509Z",
    "dateReserved": "2025-12-09T13:38:02.928Z",
    "dateUpdated": "2026-04-13T14:25:37.532Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14329 (GCVE-0-2025-14329)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:38 – Updated: 2026-04-13 14:25

Title

Privilege escalation in the Netmonitor component

Summary

Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

8.8 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-10 04:57 UTC

CWE

CWE-noinfo Not enough information

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1997018
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

satrya wira yudha

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14329",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-10T04:57:15.843111Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "description": "CWE-noinfo Not enough information",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:07.126Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "satrya wira yudha"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Privilege escalation in the Netmonitor component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:39.463Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1997018"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Privilege escalation in the Netmonitor component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14329",
    "datePublished": "2025-12-09T13:38:04.796Z",
    "dateReserved": "2025-12-09T13:38:04.223Z",
    "dateUpdated": "2026-04-13T14:25:39.463Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14330 (GCVE-0-2025-14330)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:38 – Updated: 2026-04-13 14:25

Title

JIT miscompilation in the JavaScript Engine: JIT component

Summary

JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-11 20:35 UTC

CWE

CWE-686 - Function Call With Incorrect Argument Type
CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=1997503
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Rong Bao

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14330",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-11T20:35:46.407561Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-686",
                "description": "CWE-686 Function Call With Incorrect Argument Type",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-843",
                "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-11T20:38:25.860Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Rong Bao"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:41.657Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1997503"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "JIT miscompilation in the JavaScript Engine: JIT component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14330",
    "datePublished": "2025-12-09T13:38:05.995Z",
    "dateReserved": "2025-12-09T13:38:05.412Z",
    "dateUpdated": "2026-04-13T14:25:41.657Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14331 (GCVE-0-2025-14331)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:38 – Updated: 2026-04-13 14:25

Title

Same-origin policy bypass in the Request Handling component

Summary

Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

6.5 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-09 16:59 UTC

CWE

CWE-346 - Origin Validation Error

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

6 references

URL	Tags
https://bugzilla.mozilla.org/show_bug.cgi?id=2000218
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 115.31 , ≤ 115.* (rpm) Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Igor Morgenstern

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.5,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14331",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-09T16:59:10.319738Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-346",
                "description": "CWE-346 Origin Validation Error",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-09T16:59:50.907Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "115.*",
              "status": "unaffected",
              "version": "115.31",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Igor Morgenstern"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Same-origin policy bypass in the Request Handling component. This vulnerability was fixed in Firefox 146, Firefox ESR 115.31, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:43.540Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=2000218"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-93/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Same-origin policy bypass in the Request Handling component"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14331",
    "datePublished": "2025-12-09T13:38:07.191Z",
    "dateReserved": "2025-12-09T13:38:06.607Z",
    "dateUpdated": "2026-04-13T14:25:43.540Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2025-14333 (GCVE-0-2025-14333)

Vulnerability from cvelistv5 – Published: 2025-12-09 13:38 – Updated: 2026-04-13 14:25

Title

Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146

Summary

Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-10 04:57 UTC

CWE

CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer

Assigner

mozilla CNA under the mitre root

CNA scorecard E 38/100 over 512 records in the last 180 days details

References

5 references

URL	Tags
https://bugzilla.mozilla.org/buglist.cgi?bug_id=1…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…
https://www.mozilla.org/security/advisories/mfsa2…

Impacted products

2 products

Vendor	Product	Version
Mozilla	Firefox	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)
Mozilla	Thunderbird	Unaffected: 140.6 , ≤ 140.* (rpm) Unaffected: 146 , ≤ * (rpm)

Credits

Maurice Dauer and the Mozilla Fuzzing Team

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.1,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2025-14333",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-10T04:57:13.608656Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-119",
                "description": "CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-26T16:57:06.605Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThanOrEqual": "140.*",
              "status": "unaffected",
              "version": "140.6",
              "versionType": "rpm"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "146",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Maurice Dauer and the Mozilla Fuzzing Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
            }
          ],
          "value": "Memory safety bugs present in Firefox ESR 140.5, Thunderbird ESR 140.5, Firefox 145 and Thunderbird 145. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefox 146, Firefox ESR 140.6, Thunderbird 146, and Thunderbird 140.6."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-04-13T14:25:45.424Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1966501%2C1997639"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-92/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-94/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-95/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2025-96/"
        }
      ],
      "title": "Memory safety bugs fixed in Firefox ESR 140.6, Thunderbird ESR 140.6, Firefox 146 and Thunderbird 146"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2025-14333",
    "datePublished": "2025-12-09T13:38:09.979Z",
    "dateReserved": "2025-12-09T13:38:09.392Z",
    "dateUpdated": "2026-04-13T14:25:45.424Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Vulnerability timeline

Sightings and recorded dates, grouped by day · UTC

Order JSON

Publication & reservation Sightings KEV catalogs Other timestamps

Loading timeline…

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:0016

CVE-2025-14321 (GCVE-0-2025-14321)

CVE-2025-14322 (GCVE-0-2025-14322)

CVE-2025-14323 (GCVE-0-2025-14323)

CVE-2025-14324 (GCVE-0-2025-14324)

CVE-2025-14325 (GCVE-0-2025-14325)

CVE-2025-14328 (GCVE-0-2025-14328)

CVE-2025-14329 (GCVE-0-2025-14329)

CVE-2025-14330 (GCVE-0-2025-14330)

CVE-2025-14331 (GCVE-0-2025-14331)

CVE-2025-14333 (GCVE-0-2025-14333)

Tags

Sightings

Nomenclature

Vulnerability timeline

Related by attack behaviour