Threats Tagged 'cve-2025-10529'

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 7 Extended Lifecycle Support. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript GC component. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.4 Extended Update Support. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collection component. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.2 updates. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collector. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 9.0 updates. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collection component. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.4 updates. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript garbage collection component. The update fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.2. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, incorrect boundary conditions in the JavaScript GC component, and an integer overflow in the SVG component. The update fixes these issues in Firefox ESR 140.3 and Thunderbird ESR 140.3. The vulnerabilities have been rated with an overall security impact of Important by Red Hat.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 8.6 variants. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, integer overflow in the SVG component, and incorrect boundary conditions in the JavaScript GC component. The update is rated as important by Red Hat Product Security and fixes these issues in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in Red Hat Enterprise Linux 8.8 updates. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, incorrect boundary conditions in the JavaScript GC component, and an integer overflow in the SVG component. The vulnerabilities are rated as important by Red Hat and have been fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143, and Thunderbird 143.

Multiple security vulnerabilities affecting Mozilla Thunderbird in Red Hat Enterprise Linux 9.4 Extended Update Support have been addressed. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, incorrect boundary conditions in the JavaScript garbage collection component, same-origin policy bypass in the Layout component, memory safety bugs, information disclosure in the Networking Cache component, and an integer overflow in the SVG component. The update is rated as important by Red Hat Product Security and fixes these issues in Thunderbird ESR 140.3 and related Firefox versions.

Multiple security vulnerabilities affecting Mozilla Thunderbird have been addressed in a Red Hat security update for Thunderbird version 140.3.0-1.el9_2 on Red Hat Enterprise Linux 9.2. These include sandbox escapes due to use-after-free and undefined behavior in the Graphics Canvas2D component, a same-origin policy bypass in the Layout component, incorrect boundary conditions in the JavaScript garbage collector, memory safety bugs, information disclosure in the Networking Cache component, and an integer overflow in the SVG component. The update fixes these issues to improve security.