Skip to content
OpenAdvisories
Critical RHSA-2025:10185 4 CVEs

Red Hat Security Advisory: firefox security update

Published Jul 2, 2025 · Updated Jun 30, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream firefox 0:128.12.0-1.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream firefox-debuginfo 0:128.12.0-1.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream firefox-debugsource 0:128.12.0-1.el9_2
Red Hat · RHEL 9.2 E4S rhel_e4s:9.2::appstream firefox-x11 0:128.12.0-1.el9_2

Vulnerabilities 4

  • Critical 9.8
    CVE-2025-6424

    Use-after-free in FontFaceSet

    A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-6429

    Incorrect parsing of URLs could have allowed embedding of youtube.com

    Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerabi…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 6.1
    CVE-2025-6430

    Content-Disposition header ignored when a file is included in an embed or object tag

    When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vuln…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-6425

    The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

    An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 1…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374555
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374559
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374561
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2374562
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10185.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-6424
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6424
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6424
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6424
  • report
    https://access.redhat.com/security/cve/CVE-2025-6425
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6425
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6425
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6425
  • report
    https://access.redhat.com/security/cve/CVE-2025-6429
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6429
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6429
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6429
  • report
    https://access.redhat.com/security/cve/CVE-2025-6430
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-6430
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-6430
  • article
    https://www.mozilla.org/security/advisories/mfsa2025-53/#CVE-2025-6430