Red Hat Product Security released an important security advisory (RHSA-2025:22369) addressing nine distinct vulnerabilities in Mozilla Firefox on Red Hat Enterprise Linux 8.2. The issues include race conditions (CVE-2025-13012), mitigation bypasses in DOM components (CVE-2025-13013, CVE-2025-13018), use-after-free vulnerabilities in Audio/Video and WebRTC components (CVE-2025-13014, CVE-2025-13020), same-origin policy bypasses in DOM Workers and Notifications components (CVE-2025-13017, CVE-2025-13019), incorrect boundary conditions in JavaScript WebAssembly (CVE-2025-13016), and a spoofing vulnerability (CVE-2025-13015). The advisory provides updated Firefox packages for Red Hat Enterprise Linux 8.2 to fix these vulnerabilities. No CVSS scores are provided in the advisory, but the overall severity is rated as important (high). No known exploits in the wild have been reported at the time of the advisory.

The vulnerabilities affect core security mechanisms of Firefox such as memory safety (use-after-free), race conditions, same-origin policy enforcement, and mitigation bypasses, which could allow attackers to bypass security controls, cause crashes, or spoof content. These issues collectively represent a high security risk to users running affected Firefox versions on Red Hat Enterprise Linux 8.2, potentially enabling unauthorized code execution, information disclosure, or other malicious activities if exploited.

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 8.2 that address all listed vulnerabilities. Users should apply these security updates promptly following the instructions at https://access.redhat.com/articles/11258. Since this is an official Red Hat security advisory with provided fixes, applying the vendor-supplied update is the recommended and effective mitigation. No additional mitigations are specified or required beyond applying the update.