This Red Hat security advisory addresses three Firefox vulnerabilities: CVE-2026-8090 is a use-after-free vulnerability in the DOM networking component; CVE-2026-8092 involves memory safety bugs fixed in Firefox ESR and standard releases; CVE-2026-8094 concerns another issue in the WebRTC component. The vulnerabilities affect Firefox versions packaged for Red Hat Enterprise Linux 10 and its extended update support variants. The advisory provides updated Firefox packages (e.g., firefox-140.10.2-1.el10_2) that fix these issues. The Red Hat advisory classifies the update as Important and directs users to apply the provided patches. No CVSS base scores are included in the advisory, and no exploits are currently known in the wild.

The vulnerabilities include a use-after-free in the DOM networking component and memory safety bugs, which could potentially lead to security issues such as crashes or memory corruption if exploited. The WebRTC component issue may also affect browser security. The advisory rates the overall impact as Important, indicating a significant security concern but without explicit details on exploitation impact or scope. No known exploits have been reported in the wild.

Red Hat has released updated Firefox packages for Red Hat Enterprise Linux 10 and related variants that address these vulnerabilities. Users should apply these official updates promptly to remediate the issues. Detailed instructions for applying the update are available in the Red Hat advisory at https://access.redhat.com/articles/11258. Since the advisory provides an official fix, applying the update is the recommended mitigation. There is no indication that additional mitigations or workarounds are necessary.