Multiple security vulnerabilities affecting Mozilla Thunderbird, related to Firefox components, have been addressed in a Red Hat security update. These include use-after-free, race conditions, mitigation bypasses, same-origin policy bypasses, spoofing, and incorrect boundary conditions in various components such as DOM, Audio/Video, WebAssembly, WebRTC, and Graphics. The update is rated as Important by Red Hat Product Security and targets Red Hat Enterprise Linux 8.6 variants.

Red Hat Security Advisory: thunderbird security update

thunderbird

Mozilla Thunderbird is a standalone mail and newsgroup client.

Security Fix(es):

* firefox: Mitigation bypass in the DOM: Security component (CVE-2025-13018)

* firefox: Use-after-free in the Audio/Video component (CVE-2025-13014)

* firefox: Incorrect boundary conditions in the JavaScript: WebAssembly component (CVE-2025-13016)

* firefox: Same-origin policy bypass in the DOM: Workers component (CVE-2025-13019)

* firefox: Use-after-free in the WebRTC: Audio/Video component (CVE-2025-13020)

* firefox: Race condition in the Graphics component (CVE-2025-13012)

* firefox: Spoofing issue in Firefox (CVE-2025-13015)

* firefox: Mitigation bypass in the DOM: Core & HTML component (CVE-2025-13013)

* firefox: Same-origin policy bypass in the DOM: Notifications component (CVE-2025-13017)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Multiple security vulnerabilities affecting Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 8.4 have been addressed in an important security update. The issues include race conditions, use-after-free bugs, mitigation bypasses, same-origin policy bypasses, spoofing, and incorrect boundary conditions across various components such as DOM, Audio/Video, WebAssembly, WebRTC, and Graphics. Red Hat has released updated Thunderbird packages to fix these vulnerabilities.

A security advisory from Red Hat addresses multiple vulnerabilities affecting Mozilla Thunderbird, a standalone mail and newsgroup client. The issues include use-after-free, race conditions, mitigation bypasses, same-origin policy bypasses, spoofing, and incorrect boundary conditions across various components such as DOM, Audio/Video, JavaScript WebAssembly, WebRTC, and Graphics. These vulnerabilities are collectively rated as having a high security impact. The advisory provides updates for Red Hat Enterprise Linux 8.2 to remediate these issues.

Multiple security vulnerabilities affecting Mozilla Thunderbird as packaged by Red Hat have been addressed in an update for Red Hat Enterprise Linux 9.4 Extended Update Support. The issues include race conditions, use-after-free bugs, mitigation bypasses, same-origin policy bypasses, spoofing, and incorrect boundary conditions across various Firefox components embedded in Thunderbird. These vulnerabilities have been rated with an overall security impact of Important by Red Hat Product Security. The update fixes nine CVEs related to Firefox components used within Thunderbird.

Multiple security vulnerabilities affecting Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions have been addressed. These include issues such as race conditions, use-after-free bugs, same-origin policy bypasses, mitigation bypasses, spoofing, and incorrect boundary conditions in various Firefox components integrated into Thunderbird. The update is rated as important by Red Hat Product Security and addresses nine CVEs related to Firefox components used by Thunderbird.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security advisory. These include issues such as race conditions, use-after-free bugs, mitigation bypasses, same-origin policy bypasses, spoofing, and incorrect boundary conditions across various components like DOM, Audio/Video, JavaScript WebAssembly, WebRTC, and Graphics. The advisory covers a set of nine CVEs (CVE-2025-13012 through CVE-2025-13020) and applies to Red Hat Enterprise Linux 9.2 and its variants. Red Hat has released updated Thunderbird packages to fix these vulnerabilities.

Multiple security vulnerabilities have been identified and addressed in Mozilla Firefox as packaged for Red Hat Enterprise Linux 9.4 Extended Update Support. These include issues such as mitigation bypasses, use-after-free bugs, same-origin policy bypasses, race conditions, and spoofing vulnerabilities affecting various components like DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. Red Hat has released an important security update to fix these issues in Firefox version 140.5.0-1.el9_4 across multiple architectures.

Red Hat Security Advisory: firefox security update

firefox

A security update for Mozilla Firefox addresses multiple vulnerabilities including mitigation bypasses, use-after-free conditions, same-origin policy bypasses, race conditions, and spoofing issues across various browser components such as DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. These vulnerabilities affect Red Hat Enterprise Linux 9.2 distributions and related variants. The update is rated as Important by Red Hat Product Security and fixes nine distinct CVEs. No CVSS scores are provided in the advisory. The update is available through Red Hat's official channels.

Multiple security vulnerabilities have been identified and addressed in Mozilla Firefox as packaged for Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include issues such as race conditions, use-after-free bugs, same-origin policy bypasses, mitigation bypasses, spoofing, and incorrect boundary conditions across various Firefox components including DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. Red Hat has released an important security update to fix these issues in Firefox version 140.5.0-1.el7_9 for multiple architectures. The update mitigates potential security risks associated with these vulnerabilities.

Multiple security vulnerabilities have been identified and addressed in Mozilla Firefox as distributed by Red Hat Enterprise Linux 8.8. These include issues such as use-after-free, race conditions, mitigation bypasses, same-origin policy bypasses, and spoofing vulnerabilities affecting various components like DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. Red Hat has issued an important security update to fix these issues in Firefox version 140.5.0-1.el8_8. The update is available for several Red Hat Enterprise Linux 8.8 variants including x86_64 and ppc64le architectures.

Multiple security vulnerabilities affecting Mozilla Firefox as packaged by Red Hat Enterprise Linux 8 have been addressed in an important security update. The issues include use-after-free bugs, race conditions, same-origin policy bypasses, mitigation bypasses, incorrect boundary conditions, and spoofing vulnerabilities across various Firefox components such as DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. These vulnerabilities could potentially allow attackers to bypass security controls or cause memory corruption. Red Hat has released updated Firefox packages for multiple architectures and platforms within RHEL 8 to remediate these issues.

Multiple security vulnerabilities affecting Mozilla Firefox have been addressed in a Red Hat security update for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. These include issues such as race conditions, use-after-free bugs, mitigation bypasses, same-origin policy bypasses, incorrect boundary conditions, and spoofing vulnerabilities across various Firefox components including DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. The update is rated as Important by Red Hat Product Security and addresses nine CVEs. Users of affected Red Hat Enterprise Linux 9.0 variants should apply the update to remediate these vulnerabilities.

A security advisory from Red Hat addresses multiple vulnerabilities in Mozilla Firefox, including race conditions, use-after-free errors, same-origin policy bypasses, mitigation bypasses, incorrect boundary conditions, and spoofing issues. These vulnerabilities affect various components such as DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. The advisory rates the security impact as Important and provides updated Firefox packages for Red Hat Enterprise Linux 8.6 variants. No CVSS scores are provided in the advisory.

Multiple security vulnerabilities have been identified in Mozilla Firefox as packaged for Red Hat Enterprise Linux 8.2. These include use-after-free bugs, race conditions, same-origin policy bypasses, mitigation bypasses, and spoofing issues affecting various components such as DOM, Audio/Video, WebAssembly, WebRTC, Graphics, and Notifications. Red Hat has issued an important security advisory with updates addressing these issues. The vulnerabilities collectively pose a high security impact. Users of affected Red Hat Enterprise Linux 8.2 systems should apply the provided Firefox update to remediate these issues.

A security advisory from Red Hat addresses multiple vulnerabilities in Mozilla Firefox, including race conditions, use-after-free bugs, mitigation bypasses, same-origin policy bypasses, and spoofing issues across various components such as DOM, Audio/Video, JavaScript WebAssembly, WebRTC, and Graphics. These vulnerabilities collectively pose a high security risk. The advisory provides updates for Red Hat Enterprise Linux 8.4 variants to remediate these issues.

Multiple security vulnerabilities affecting Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 8 have been addressed. These include issues such as race conditions, use-after-free, mitigation bypasses, same-origin policy bypasses, spoofing, and incorrect boundary conditions across various components including DOM, Audio/Video, JavaScript WebAssembly, WebRTC, and Graphics. Red Hat has issued an important security update to fix these vulnerabilities in Thunderbird. The update is available for Red Hat Enterprise Linux 8 on multiple architectures including x86_64, s390x, ppc64le, and aarch64.

Multiple security vulnerabilities affecting Mozilla Thunderbird, as packaged by Red Hat, have been addressed in a security update. These include issues such as race conditions, use-after-free, mitigation bypasses, same-origin policy bypasses, and spoofing vulnerabilities in various Firefox components integrated into Thunderbird. The update is rated as important by Red Hat Product Security and affects Red Hat Enterprise Linux 9 and its Extended Update Support versions. The advisory references nine CVEs related to Firefox components used by Thunderbird. No CVSS scores are provided in the advisory.

Multiple security vulnerabilities affecting Mozilla Thunderbird as packaged by Red Hat Enterprise Linux 10.0 Extended Update Support have been addressed. These include race conditions, use-after-free issues, same-origin policy bypasses, mitigation bypasses, spoofing, and incorrect boundary conditions across various Firefox components integrated into Thunderbird. The update is rated as Important by Red Hat Product Security. Users of affected Red Hat Enterprise Linux 10.0 versions should apply the provided security update to remediate these issues.

Multiple security vulnerabilities affecting Mozilla Thunderbird integrated with Firefox components have been addressed in a Red Hat Enterprise Linux 9.6 update. These include use-after-free, race conditions, mitigation bypasses, same-origin policy bypasses, and spoofing vulnerabilities. The update is rated as important by Red Hat Product Security and fixes several CVEs related to Firefox components used by Thunderbird.

Search: CVE-2025-13012