Skip to content
OpenAdvisories
High WID-SEC-2025-1395 13 CVEs

Mozilla Firefox: Mehrere Schwachstellen

Published Jun 24, 2025 · Updated Jun 11, 2026 · Revision 23 · de-DE

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: IGEL Vendor: Mozilla Vendor: Oracle Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Vendor: Xerox Product: Enterprise Linux Product: Firefox Product: Firefox ESR Product: FreeFlow Print Server Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: OS Product: Thunderbird Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Angriff auszulösen, Sicherheitsmaßnahmen zu umgehen oder einen Cross-Site-Scripting-Angriff zu starten.

Product

Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.

Vulnerabilities 13

  • Critical 9.8
    CVE-2025-6424

    Use-after-free in FontFaceSet

    A use-after-free in FontFaceSet resulted in a potentially exploitable crash. This vulnerability was fixed in Firefox 140, Firefox ESR 115.25, Firefox ESR 128.12, Thunderbird 140, and Thunderbird 128.12.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2025-6433

    WebAuthn would allow a user to sign a challenge on a webpage with an invalid TLS certificate

    If a user visited a webpage with an invalid TLS certificate, and granted an exception, the webpage was able to provide a WebAuthn challenge that the user would be prompted to complete. This is in violation of the WebAuthN spec which requires "a secure transpo…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Critical 9.1
    CVE-2025-6427

    connect-src Content Security Policy restriction could be bypassed

    An attacker was able to bypass the `connect-src` directive of a Content Security Policy by manipulating subdocuments. This would have also hidden the connections from the Network tab in Devtools. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • High 8.8
    CVE-2025-6426

    No warning when opening executable terminal files on macOS

    The executable file warning did not warn users before opening files with the `terminal` extension. *This bug only affects Firefox for macOS. Other versions of Firefox are unaffected.*. This vulnerability was fixed in Firefox 140, Firefox ESR 128.12, Thunderbi…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • High 8.6
    CVE-2025-6432

    DNS Requests leaked outside of a configured SOCKS proxy

    When Multi-Account Containers was enabled, DNS requests could have bypassed a SOCKS proxy when the domain name was invalid or the SOCKS proxy was not responding. This vulnerability was fixed in Firefox 140 and Thunderbird 140.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • High 8.1
    CVE-2025-6435

    Save as in Devtools could download files without sanitizing the extension

    If a user saved a response from the Network tab in Devtools using the Save As context menu option, that file may not have been saved with the `.download` file extension. This could have led to the user inadvertently running a malicious executable. This vulner…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • High 8.1
    CVE-2025-6436

    Memory safety bugs fixed in Firefox 140 and Thunderbird 140

    Memory safety bugs present in Firefox 139 and Thunderbird 139. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-6429

    Incorrect parsing of URLs could have allowed embedding of youtube.com

    Firefox could have incorrectly parsed a URL and rewritten it to the youtube.com domain when parsing the URL specified in an `embed` tag. This could have bypassed website security checks that restricted which domains users were allowed to embed. This vulnerabi…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-6431

    The prompt in Firefox for Android that asks before opening a link in an external application could be bypassed

    When a link can be opened in an external application, Firefox for Android will, by default, prompt the user before doing so. An attacker could have bypassed this prompt, potentially exposing the user to security vulnerabilities or privacy leaks in external ap…

    Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi
  • Medium 6.1
    CVE-2025-6430

    Content-Disposition header ignored when a file is included in an embed or object tag

    When a file download is specified via the `Content-Disposition` header, that directive would be ignored if the file was included via a `<embed>` or `<object>` tag, potentially making a website vulnerable to a cross-site scripting attack. This vuln…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-6425

    The WebCompat WebExtension shipped with Firefox exposed a persistent UUID

    An attacker who enumerated resources from the WebCompat extension could have obtained a persistent UUID that identified the browser, and persisted between containers and normal/private browsing mode, but not profiles. This vulnerability was fixed in Firefox 1…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-6428

    Firefox for Android opened URLs specified in a link querystring parameter

    When a URL was provided in a link querystring parameter, Firefox for Android would follow that URL instead of the correct URL, potentially leading to phishing attacks. *This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. Thi…

    Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi
  • Medium 4.3
    CVE-2025-6434

    HTTPS-Only exception screen lacked anti-clickjacking delay

    The exception page for the HTTPS-Only feature, displayed when a website is opened via HTTP, lacked an anti-clickjacking delay, potentially allowing an attacker to trick a user into granting an exception and loading a webpage over HTTP. This vulnerability was …

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi

Revision history

  1. #23

    Neue Updates von Oracle Linux aufgenommen

  2. #22

    Neue Updates von Oracle Linux aufgenommen

  3. #21

    Neue Updates von Oracle Linux aufgenommen

  4. #20

    Neue Updates von Ubuntu aufgenommen

  5. #19

    Neue Updates von SUSE aufgenommen

  6. #18

    Neue Updates von openSUSE aufgenommen

  7. #17

    Neue Updates von XEROX aufgenommen

  8. #16

    Neue Updates von SUSE aufgenommen

  9. #15

    Neue Updates von openSUSE und SUSE aufgenommen

  10. #14

    Neue Updates von Ubuntu aufgenommen

  11. #13

    Neue Updates von SUSE aufgenommen

  12. #12

    Neue Updates von SUSE aufgenommen

  13. #11

    Neue Updates von Oracle Linux aufgenommen

  14. #10

    Neue Updates von Debian aufgenommen

  15. #9

    Neue Updates von openSUSE und Amazon aufgenommen

  16. #8

    Neue Updates von Fedora und openSUSE aufgenommen

  17. #7

    Neue Updates von Debian aufgenommen

  18. #6

    Neue Updates von Mozilla und Oracle Linux aufgenommen

  19. #5

    Neue Updates von Red Hat und Oracle Linux aufgenommen

  20. #4

    Neue Updates von Debian aufgenommen

  21. #3

    Neue Updates von SUSE aufgenommen

  22. #2

    Neue Updates von Debian aufgenommen

  23. #1

    Initiale Fassung

References