Multiple vulnerabilities in Mozilla Firefox

Descrição

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. Security bypass vulnerability in JavaScript engine can be exploited to bypass security restrictions.
2. Denial of service vulnerability in large branch table can be exploited to cause denial of service.
3. Code execution vulnerability in javascript URLs when used in object and embed tags can be exploited to execute arbitrary code
4. Code execution vulnerability in “Copy as cURL” command can be exploited to execute arbitrary code.
5. Information disclosure vulnerability in URL stripping can be exploited to obtain sensitive information.
6. Security bypass vulnerability can be exploited via special crafted XSLT document to bypass security restrictions.
7. Denial of service vulnerability in JavaScript state machine can be exploited to denial of service.
8. Memory safety vulnerability can be exploited to execute arbitrary code.
9. Security bypass vulnerability in cached CORS can be exploited to bypass security restrictions.
10. Security bypass vulnerability in cookie can be exploited to bypass security restrictions.
11. Security bypass vulnerability in CSP frame-src can be exploited to bypass security restrictions.
12. Security UI vulnerability in URL bar can be exploited to spoof user interface.
13. Security bypass vulnerability in URL truncation can be exploited to bypass security restrictions.
14. Security vulnerability can be exploited to spoof true origin of the page and bypass security restrictions
15. URL truncation vulnerability can be exploited to spoof user interface and bypass security restrictions
16. Sandboxed iframe vulnerability can be exploited to bypass security restrictions

Comunicados originais

• MFSA2025-56

Exploração

Public exploits exist for this vulnerability.

Produtos relacionados

• Mozilla-Firefox

Lista de CVE

• CVE-2025-8027
  high
• CVE-2025-8028
  critical
• CVE-2025-8029
  critical
• CVE-2025-8030
  critical
• CVE-2025-8031
  critical
• CVE-2025-8032
  critical
• CVE-2025-8033
  high
• CVE-2025-8034
  critical
• CVE-2025-8035
  critical
• CVE-2025-8036
  critical
• CVE-2025-8037
  critical
• CVE-2025-8038
  critical
• CVE-2025-8039
  critical
• CVE-2025-8040
  critical
• CVE-2025-8043
  critical
• CVE-2025-8044
  critical
• CVE-2025-8041
  high
• CVE-2025-8042
  critical
• CVE-2025-8364
  warning

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com