Description
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Use-after-free vulnerability in Graphics: Canvas2D component can be exploited remotely to execute arbitrary code
- Spoofing vulnerability in WebAuthn component can be exploited to spoof user interface
- Same-origin policy bypass vulnerability in Layout component can be exploited to bypass security restrictions
- Sandbox escape vulnerability in Canvas2D component can be exploited remotely to execute arbitrary code
- Memory corruption vulnerability can be exploited remotely to execute arbitrary code
- Mitigation bypass vulnerability in the Web Compatibility: Tooling component can be exploited to bypass security restrictions
- Integer overflow vulnerability in SVG component can be exploited remotely to execute arbitrary code
- Information disclosure vulnerability in the Networking: Cache component can be exploited to obtain sensitive information
- Spoofing vulnerability in the Site Permissions component can be exploited to spoof user interface
- Incorrect boundary vulnerability in the JavaScript: GC component can be exploited remotely to execute arbitrary code
- Information disclosure vulnerability in Firefox for Android can be exploited to obtain sensitive information
Original advisories
Related products
CVE list
- CVE-2025-10528 high
- CVE-2025-10529 high
- CVE-2025-10530 high
- CVE-2025-10531 high
- CVE-2025-10532 high
- CVE-2025-10534 critical
- CVE-2025-10535 critical
- CVE-2025-10537 critical
- CVE-2025-10527 high
- CVE-2025-10533 critical
- CVE-2025-10536 high
Read more
Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com
Found an inaccuracy in the description of this vulnerability? Let us know!