This Red Hat security advisory addresses nine distinct vulnerabilities in Mozilla Firefox, including CVE-2025-13012 (race condition in Graphics), CVE-2025-13013 and CVE-2025-13018 (mitigation bypasses in DOM components), CVE-2025-13014 and CVE-2025-13020 (use-after-free in Audio/Video and WebRTC components), CVE-2025-13015 (spoofing issue), CVE-2025-13016 (incorrect boundary conditions in JavaScript WebAssembly), CVE-2025-13017 and CVE-2025-13019 (same-origin policy bypasses in DOM Workers and Notifications components). Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 10.0 Extended Update Support and related architectures to fix these vulnerabilities. The advisory references detailed CVE pages for further information.

The vulnerabilities collectively could allow attackers to bypass security mitigations, cause use-after-free conditions potentially leading to arbitrary code execution, bypass same-origin policy protections, cause race conditions, and spoof content within Firefox. These issues could compromise browser security, potentially leading to unauthorized access or manipulation of web content and user data. Red Hat rates the overall security impact as Important (high). There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 10.0 Extended Update Support and related architectures that address these vulnerabilities. Users should apply the provided security updates as detailed in the Red Hat advisory RHSA-2025:21120 and the update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated beyond applying the official patches.