Red Hat Security Advisory: firefox security update
This advisory addresses multiple security vulnerabilities in Mozilla Firefox and Thunderbird, including a use-after-free bug triggered by XSLTProcessor (CVE-2025-3028), URL bar spoofing via non-BMP Unicode characters (CVE-2025-3029), and various memory safety bugs (CVE-2025-3030). These issues are fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 10 and its extended update support versions.
AI Analysis
Technical Summary
Red Hat Product Security released an important security update for Firefox and Thunderbird addressing three vulnerabilities: CVE-2025-3028 (use-after-free triggered by XSLTProcessor), CVE-2025-3029 (URL bar spoofing via non-BMP Unicode characters), and CVE-2025-3030 (memory safety bugs). These vulnerabilities affect multiple architectures of Red Hat Enterprise Linux 10 and are fixed in Firefox 128.9.0 packages provided by Red Hat. The advisory references fixes in Firefox 137 and Thunderbird 137 upstream. No CVSS scores are provided in the advisory, but the update is classified as important.
Potential Impact
The vulnerabilities include a use-after-free condition that could lead to memory corruption, URL bar spoofing that may deceive users about the legitimacy of a website, and other memory safety issues. These could potentially allow attackers to execute arbitrary code or conduct phishing attacks. The impact is rated as important by Red Hat, indicating significant security concerns but no confirmed exploits in the wild at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated Firefox packages (version 128.9.0-3.el10_0 and related) for Red Hat Enterprise Linux 10 and its extended update support variants. Users should apply these official updates promptly to remediate the vulnerabilities. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the vendor-provided patches.
Red Hat Security Advisory: firefox security update
Description
This advisory addresses multiple security vulnerabilities in Mozilla Firefox and Thunderbird, including a use-after-free bug triggered by XSLTProcessor (CVE-2025-3028), URL bar spoofing via non-BMP Unicode characters (CVE-2025-3029), and various memory safety bugs (CVE-2025-3030). These issues are fixed in Firefox 137, Thunderbird 137, Firefox ESR 128.9, and Thunderbird 128.9. The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 10 and its extended update support versions.
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Red Hat Product Security released an important security update for Firefox and Thunderbird addressing three vulnerabilities: CVE-2025-3028 (use-after-free triggered by XSLTProcessor), CVE-2025-3029 (URL bar spoofing via non-BMP Unicode characters), and CVE-2025-3030 (memory safety bugs). These vulnerabilities affect multiple architectures of Red Hat Enterprise Linux 10 and are fixed in Firefox 128.9.0 packages provided by Red Hat. The advisory references fixes in Firefox 137 and Thunderbird 137 upstream. No CVSS scores are provided in the advisory, but the update is classified as important.
Potential Impact
The vulnerabilities include a use-after-free condition that could lead to memory corruption, URL bar spoofing that may deceive users about the legitimacy of a website, and other memory safety issues. These could potentially allow attackers to execute arbitrary code or conduct phishing attacks. The impact is rated as important by Red Hat, indicating significant security concerns but no confirmed exploits in the wild at the time of the advisory.
Mitigation Recommendations
Red Hat has released updated Firefox packages (version 128.9.0-3.el10_0 and related) for Red Hat Enterprise Linux 10 and its extended update support variants. Users should apply these official updates promptly to remediate the vulnerabilities. Detailed update instructions are available at https://access.redhat.com/articles/11258. No additional mitigations are specified or required beyond applying the vendor-provided patches.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:7491
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-3029","CVE-2025-3030"]
- Cvss Version
- null
Threat ID: 6a4049e827e9c79719835575
Added to database: 06/27/2026, 22:08:40 UTC
Last enriched: 06/27/2026, 22:37:18 UTC
Last updated: 07/02/2026, 20:51:16 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.