Descrição
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Use-after-free vulnerability in Graphics: Canvas2D component can be exploited remotely to execute arbitrary code
- Spoofing vulnerability in WebAuthn component can be exploited to spoof user interface
- Same-origin policy bypass vulnerability in Layout component can be exploited to bypass security restrictions
- Sandbox escape vulnerability in Canvas2D component can be exploited remotely to execute arbitrary code
- Memory corruption vulnerability can be exploited remotely to execute arbitrary code
- Mitigation bypass vulnerability in the Web Compatibility: Tooling component can be exploited to bypass security restrictions
- Integer overflow vulnerability in SVG component can be exploited remotely to execute arbitrary code
- Information disclosure vulnerability in the Networking: Cache component can be exploited to obtain sensitive information
- Spoofing vulnerability in the Site Permissions component can be exploited to spoof user interface
- Incorrect boundary vulnerability in the JavaScript: GC component can be exploited remotely to execute arbitrary code
- Information disclosure vulnerability in Firefox for Android can be exploited to obtain sensitive information
Comunicados originais
Exploração
Public exploits exist for this vulnerability.
Produtos relacionados
Lista de CVE
- CVE-2025-10528 high
- CVE-2025-10529 high
- CVE-2025-10530 high
- CVE-2025-10531 high
- CVE-2025-10532 high
- CVE-2025-10534 critical
- CVE-2025-10535 critical
- CVE-2025-10537 critical
- CVE-2025-10527 high
- CVE-2025-10533 critical
- CVE-2025-10536 high
Saiba mais
Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com
Encontrou uma imprecisão na descrição desta vulnerabilidade? Avise-nos!