Skip to content
OpenAdvisories
High WID-SEC-2025-1866 15 CVEs

Mozilla Firefox und Thunderbird: Mehrere Schwachstellen

Published Aug 19, 2025 · Updated Jun 15, 2026 · Revision 24 · de-DE

Vendor: amazon Vendor: Debian Vendor: IGEL Vendor: Mozilla Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Firefox Product: Firefox ESR Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openSUSE Product: OS Product: Rocky Linux Product: Thunderbird Platform: iOS Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Daten zu manipulieren, um einen Denial of Service Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

Product

Firefox ist ein Open Source Web Browser.
ESR ist die Variante mit verlängertem Support.
Thunderbird ist ein Open Source E-Mail Client.

Vulnerabilities 15

  • Critical 9.8
    CVE-2025-55031

    Passkey phishing within Bluetooth range

    Malicious pages could use Firefox for iOS to pass FIDO: links to the OS and trigger the hybrid passkey transport. An attacker within Bluetooth range could have used this to trick the user into using their passkey to log the attacker's computer into the target…

    Mozilla Firefox for iOS Focus for iOS firefox iOS Browsers Wolfi
  • Critical 9.8
    CVE-2025-9179

    Sandbox escape due to invalid pointer in the Audio/Video: GMP component

    An attacker was able to perform memory corruption in the GMP process which processes encrypted media. This process is also heavily sandboxed, but represents slightly different privileges from the content process. This vulnerability was fixed in Firefox 142, F…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Critical 9.8
    CVE-2025-9187

    Memory safety bugs fixed in Firefox 142 and Thunderbird 142

    Memory safety bugs present in Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability was fixed in Firefo…

    Mozilla Firefox Thunderbird mozjs38 Browsers Ubuntu Wolfi
  • High 8.1
    CVE-2025-9180

    Same-origin policy bypass in the Graphics: Canvas2D component

    Same-origin policy bypass in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 142, Firefox ESR 115.27, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • High 8.1
    CVE-2025-9184

    Memory safety bugs fixed in Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142

    Memory safety bugs present in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary co…

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • High 8.1
    CVE-2025-9185

    Memory safety bugs fixed in Firefox ESR 115.27, Firefox ESR 128.14, Thunderbird ESR 128.14, Firefox ESR 140.2, Thunderbird ESR 140.2, Firefox 142 and Thunderbird 142

    Memory safety bugs present in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141. Some of these bugs showed evidence of memory corruption and we presume that with enough ef…

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • High 7.5
    CVE-2025-55029

    Malicious scripts could spam popups for denial of service attacks

    Malicious scripts could bypass the popup blocker to spam new tabs, potentially resulting in denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.

    Mozilla Firefox for iOS firefox iOS Browsers Wolfi
  • High 7.5
    CVE-2025-9182

    Denial-of-service due to out-of-memory in the Graphics: WebRender component

    Denial-of-service due to out-of-memory in the Graphics: WebRender component. This vulnerability was fixed in Firefox 142, Firefox ESR 140.2, Thunderbird 142, and Thunderbird 140.2.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-55028

    JavaScript alerts could impede UI interaction or allow denial of service attacks

    Malicious scripts utilizing repetitive JavaScript alerts could prevent client user interaction in some scenarios and allow for denial of service attacks. This vulnerability was fixed in Firefox for iOS 142.

    Mozilla Firefox for iOS firefox iOS Browsers Wolfi
  • Medium 6.5
    CVE-2025-9181

    Uninitialized memory in the JavaScript Engine component

    Uninitialized memory in the JavaScript Engine component. This vulnerability was fixed in Firefox 142, Firefox ESR 128.14, Firefox ESR 140.2, Thunderbird 142, Thunderbird 128.14, and Thunderbird 140.2.

    Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Wolfi
  • Medium 6.5
    CVE-2025-9183

    Spoofing issue in the Address Bar component

    Spoofing issue in the Address Bar component. This vulnerability was fixed in Firefox 142 and Firefox ESR 140.2.

    Mozilla Firefox firefox Browsers Wolfi
  • Medium 6.5
    CVE-2025-9186

    Spoofing issue in the Address Bar component of Firefox Focus for Android

    Spoofing issue in the Address Bar component of Firefox Focus for Android. This vulnerability was fixed in Firefox 142.

    Mozilla Firefox Browsers
  • Medium 6.1
    CVE-2025-55030

    Content-Disposition headers incorrectly ignored for some MIME types

    Firefox for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline rather than downloading, potentially allowing for XSS attacks. This vulnerability was fixed in Firefox for iOS 142.

    Mozilla Firefox for iOS firefox iOS Browsers Wolfi
  • Medium 6.1
    CVE-2025-55032

    Focus incorrectly ignores Content-Disposition headers for some MIME types

    Focus for iOS would not respect a Content-Disposition header of type Attachment and would incorrectly display the content inline, potentially allowing for XSS attacks. This vulnerability was fixed in Focus for iOS 142.

    Mozilla Focus for iOS iOS
  • Medium 6.1
    CVE-2025-55033

    Drag and drop gestures in Focus for iOS could allow JavaScript links to be executed incorrectly

    Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142.

    Mozilla Focus for iOS iOS

Revision history

  1. #24

    Neue Updates von Oracle Linux aufgenommen

  2. #23

    Neue Updates von Oracle Linux aufgenommen

  3. #22

    Neue Updates von Oracle Linux aufgenommen

  4. #21

    Neue Updates von Oracle Linux aufgenommen

  5. #20

    Neue Updates von Ubuntu aufgenommen

  6. #19

    Neue Updates von SUSE aufgenommen

  7. #18

    Neue Updates von openSUSE aufgenommen

  8. #17

    Neue Updates von SUSE aufgenommen

  9. #16

    Neue Updates von SUSE aufgenommen

  10. #15

    Referenz(en) aufgenommen: RLSA-2025:14416

  11. #14

    Neue Updates von Oracle Linux aufgenommen

  12. #13

    Neue Updates von Amazon aufgenommen

  13. #12

    Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen

  14. #11

    Neue Updates von Red Hat aufgenommen

  15. #10

    Neue Updates von openSUSE aufgenommen

  16. #9

    Neue Updates von IGEL aufgenommen

  17. #8

    Neue Updates von Oracle Linux und SUSE aufgenommen

  18. #7

    Neue Updates von openSUSE, Red Hat und Oracle Linux aufgenommen

  19. #6

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  20. #5

    Neue Updates von Oracle Linux aufgenommen

  21. #4

    Neue Updates von Debian, openSUSE und Red Hat aufgenommen

  22. #3

    Neue Updates von openSUSE und Debian aufgenommen

  23. #2

    Neue Updates von Debian aufgenommen

  24. #1

    Initiale Fassung

References