Kaspersky ID:
KLA90004
Дата обнаружения:
11/11/2025
Обновлено:
12/11/2025

Описание

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface.

Below is a complete list of vulnerabilities:

  1. Incorrect boundary conditions vulnerability in the Graphics: WebGPU component can be exploited to cause denial of service.
  2. Race condition vulnerability in the Graphics component can be exploited to cause denial of service.
  3. Sandbox escape due to incorrect boundary conditions vulnerability in the Graphics: WebGPU component can be exploited to cause denial of service.
  4. Incorrect boundary conditions vulnerability in the JavaScript: WebAssembly component can be exploited to cause denial of service.
  5. JIT miscompilation vulnerability in the JavaScript Engine: JIT component can be exploited to cause denial of service.
  6. Same-origin policy bypass vulnerability in the DOM: Notifications component can be exploited to bypass security restrictions.
  7. Mitigation bypass vulnerability in the DOM: Security component can be exploited to bypass security restrictions.
  8. Same-origin policy bypass vulnerability in the DOM: Workers component can be exploited to bypass security restrictions.
  9. Mitigation bypass vulnerability in the DOM: Core & HTML component can be exploited to bypass security restrictions.
  10. Use-after-free vulnerability in the WebRTC: Audio/Video component can be exploited to cause denial of service or execute arbitrary code.
  11. Use-after-free vulnerability in the Audio/Video component can be exploited to cause denial of service or execute arbitrary code.
  12. Spoofing vulnerability in Firefox can be exploited to spoof user interface.
  13. Memory safety vulnerability in Firefox can be exploited to execute arbitrary code.

Первичный источник обнаружения

Связанные продукты

Список CVE

  • CVE-2025-13012
    unknown
  • CVE-2025-13013
    unknown
  • CVE-2025-13014
    unknown
  • CVE-2025-13015
    unknown
  • CVE-2025-13016
    unknown
  • CVE-2025-13017
    unknown
  • CVE-2025-13018
    unknown
  • CVE-2025-13019
    unknown
  • CVE-2025-13020
    unknown
  • CVE-2025-13021
    unknown
  • CVE-2025-13022
    unknown
  • CVE-2025-13023
    unknown
  • CVE-2025-13024
    unknown
  • CVE-2025-13025
    unknown
  • CVE-2025-13026
    unknown
  • CVE-2025-13027
    unknown

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com

Нашли неточность в описании этой уязвимости? Дайте нам знать!
Kaspersky IT Security Calculator:
Оцените ваш профиль кибербезопасности
Узнать больше
Встречай новый Kaspersky!
Каждая минута твоей онлайн-жизни заслуживает топовой защиты.
Узнать больше
Confirm changes?
Your message has been sent successfully.