Kaspersky ID:
KLA90002
検出日:
11/11/2025
更新日:
11/13/2025

説明

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

  1. Race condition vulnerability in the Graphics component can be exploited to cause denial of service.
  2. Mitigation bypass vulnerability in the DOM: Core & HTML component can be exploited to bypass security restrictions.
  3. Use-after-free vulnerability in the Audio/Video component can be exploited to cause denial of service or execute arbitrary code.
  4. Spoofing vulnerability in Firefox can be exploited to spoof user interface.

オリジナルアドバイザリー

関連製品

CVEリスト

  • CVE-2025-13012
    critical
  • CVE-2025-13013
    high
  • CVE-2025-13014
    critical
  • CVE-2025-13015
    warning

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com

この脆弱性についての記述に不正確な点がありますか? お知らせください!
Kaspersky IT Security Calculator
も参照してください
新しいカスペルスキー
あなたのデジタルライフを守る
も参照してください
Do you want to save your changes?
Your message has been sent successfully.