This Red Hat security advisory (RHSA-2025:12044) addresses nine vulnerabilities in Mozilla Firefox and Thunderbird, including CVE-2025-8027, which involves the JavaScript engine writing only a partial return value to the stack, and others related to memory safety, CSP bypasses, and potential user-assisted code execution via the 'Copy as cURL' command. The advisory covers fixes for Red Hat Enterprise Linux 9.4 Extended Update Support across multiple architectures. No CVSS scores are provided in the advisory, but the issues are rated with an overall security impact of Important by Red Hat Product Security.

The vulnerabilities include memory safety bugs that could lead to crashes or potentially exploitable conditions, incorrect handling of URLs in CSP reports that may weaken security policies, partial writes in the JavaScript engine that could cause unexpected behavior, and potential user-assisted code execution via browser features. These issues collectively could allow attackers to bypass security controls or execute code under certain conditions, impacting the confidentiality, integrity, and availability of affected systems running the vulnerable Firefox or Thunderbird versions.

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 9.4 Extended Update Support that address these vulnerabilities. Users should apply the provided security update as detailed in the Red Hat advisory RHSA-2025:12044 and the referenced article https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official update.