説明
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions, perform cross-site scripting attack.
Below is a complete list of vulnerabilities:
- Use-after-free vulnerability in MediaTrackGraph can be exploited remotely to execute arbitrary code and cause denial of service
- Out of bounds read/write vulnerability in WebGL can be exploited remotely to execute arbitrary code and cause denial of service
- Security bypass vulnerability in privileged browser process can be exploited to bypass security restrictions and obtain sensitive information
- Security bypass vulnerability in JavaScript can be exploited to modify non-writable properties and bypass security restrictions
- Cross site scripting vulnerability due to improper MIME-type enforcement in OBJECT tag can be exploited remotely to execute arbitrary code
- Insufficient escaping in the “Copy as cURL” feature vulnerability can be exploited remotely to execute arbitrary code
- Memory corruption vulnerability can be exploited remotely to execute arbitrary code and cause denial of service
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2025-11708 critical
- CVE-2025-11709 critical
- CVE-2025-11710 critical
- CVE-2025-11711 high
- CVE-2025-11712 high
- CVE-2025-11713 critical
- CVE-2025-11714 critical
- CVE-2025-11715 critical
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！