Skip to content
OpenAdvisories
Medium WID-SEC-2025-2168 3 CVEs

Mozilla Firefox: Mehrere Schwachstellen

Published Sep 30, 2025 · Updated Oct 5, 2025 · Revision 2 · de-DE

Vendor: Mozilla Vendor: SUSE Product: Firefox Product: openSUSE Platform: macOS Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Mozilla Firefox ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen und vertrauliche Informationen offenzulegen.

Product

Firefox ist ein Open Source Web Browser.

Vulnerabilities 3

  • High 8.6
    CVE-2025-11152

    Sandbox escape due to integer overflow in the Graphics: Canvas2D component

    Sandbox escape due to integer overflow in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143.0.3.

    Mozilla Firefox firefox Browsers Wolfi
  • High 7.5
    CVE-2025-11153

    JIT miscompilation in the JavaScript Engine: JIT component

    JIT miscompilation in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox 143.0.3.

    Mozilla Firefox mozjs38 mozjs52 Browsers Ubuntu Wolfi
  • Medium 4.0
    CVE-2025-10859

    Data stored in cookies for non-HTML content while browsing Incognito could be viewed after closing private tabs

    Cookie storage for non-HTML temporary documents was being shared incorrectly with normal browsing content, allowing information from private tabs to escape Incognito mode even after the user closed all tabs. This vulnerability was fixed in Firefox for iOS 143…

    Mozilla Firefox for iOS iOS Browsers

Revision history

  1. #2

    Neue Updates von openSUSE aufgenommen

  2. #1

    Initiale Fassung

References