The advisory covers three security fixes for Mozilla Firefox on Red Hat Enterprise Linux 9: a use-after-free vulnerability in the DOM networking component (CVE-2026-8090), memory safety bugs fixed in Firefox ESR 115.35.2, ESR 140.10.2, and Firefox 150.0.2 (CVE-2026-8092), and another issue in the WebRTC component (CVE-2026-8094). These vulnerabilities could potentially lead to memory corruption or other security impacts. Red Hat has released updated Firefox packages addressing these issues across multiple architectures and variants of Red Hat Enterprise Linux 9. The advisory references Red Hat's official errata and update articles for applying the fixes.

The vulnerabilities include use-after-free and memory safety bugs, which can lead to potential security risks such as application crashes or arbitrary code execution if exploited. Red Hat rates the overall security impact as Important. There are no known exploits in the wild at the time of the advisory. The issues affect Firefox versions shipped with Red Hat Enterprise Linux 9 and its Extended Update Support and Extended Life Cycle variants across multiple hardware architectures.

Red Hat has released updated Firefox packages that fix these vulnerabilities. Users of affected Red Hat Enterprise Linux 9 systems should apply the Firefox updates as detailed in the Red Hat advisory RHSA-2026:20574 and the associated update article (https://access.redhat.com/articles/11258). Applying these official patches is the recommended remediation. No additional mitigation steps are indicated by the vendor advisory.