Multiple vulnerabilities in Mozilla Firefox ESR

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. Security bypass vulnerability in JavaScript engine can be exploited to bypass security restrictions.
2. Denial of service vulnerability in large branch table can be exploited to cause denial of service.
3. Denial of service vulnerability in JavaScript state machine can be exploited to denial of service.
4. Memory safety vulnerability can be exploited to execute arbitrary code.

Original advisories

• MFSA2025-57

Related products

• Mozilla-Firefox-ESR

CVE list

• CVE-2025-8027
  high
• CVE-2025-8028
  critical
• CVE-2025-8033
  high
• CVE-2025-8034
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com