Skip to main content
CVE-2025-13012VulnerabilityPublished Updated

Red Hat Security Advisory: firefox security update

Affects Red Hat firefoxSource GCVE Database

0

Mentioned vulnerabilities

Authoritative record:CVE-2025-13012· High 7.5

Not known to be exploited · CVSS 7.5 High.

Data as of 26 Oct 2026, 09:15 UTC

CVSS 3.1 base score
7.5High
How severe the flaw is on the 0–10 CVSS scale.
EPSS
0.2% chance of exploitation in 30 days – higher than 15% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 11 Nov 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

AI-suggested

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 8.2 that address all listed vulnerabilities. Users should apply these security updates promptly following the instructions at https://access.redhat.com/articles/11258. Since this is an official Red Hat security advisory with provided fixes, applying the vendor-supplied update is the recommended and effective mitigation. No additional mitigations are specified or required beyond applying the update.

Description

Multiple security vulnerabilities have been identified in Mozilla Firefox as packaged for Red Hat Enterprise Linux 8.2. These include use-after-free bugs, race conditions, same-origin policy bypasses, mitigation bypasses, and spoofing issues affecting various components such as DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. Red Hat has issued an important security advisory with updates addressing these issues. The vulnerabilities collectively pose a high security impact. Users of affected Red Hat Enterprise Linux 8.2 systems should apply the provided Firefox update to remediate these issues.

References

Community reviews

Loading reviews…