Threats Tagged 'cve-2025-5263'

A security advisory from Red Hat addresses multiple vulnerabilities in Mozilla Firefox and Thunderbird, including a double-free bug in libvpx, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution errors from web content. These issues collectively pose a high security impact and affect Red Hat Enterprise Linux 8.6 variants. The advisory provides updated packages to remediate these vulnerabilities.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat Enterprise Linux 9.4 update. These include a clickjacking vulnerability potentially leaking saved payment card details, local code execution risk via the 'Copy as cURL' command, several memory safety bugs, cross-origin resource status leakage through script element events, and improper isolation of error handling for script execution from web content. The update is rated as important by Red Hat Product Security and applies to Red Hat Enterprise Linux 9.4 Extended Update Support and related variants.

A security update for Mozilla Firefox and Thunderbird addresses multiple vulnerabilities including clickjacking that could leak saved payment card details, potential local code execution via the 'Copy as cURL' command, memory safety bugs, cross-origin resource status leakage, and improper isolation of script execution error handling from web content. These issues have been rated as important by Red Hat Product Security and affect Red Hat Enterprise Linux 9.2 variants. The update is available and should be applied to mitigate these vulnerabilities.

Multiple security vulnerabilities have been identified and addressed in Mozilla Firefox and Thunderbird as part of a Red Hat security advisory. These include a clickjacking vulnerability that could leak saved payment card details, potential local code execution via the 'Copy as cURL' command, several memory safety bugs, leakage of cross-origin resource status through script element events, and improper isolation of error handling for script execution from web content. The advisory covers several CVEs and affects Red Hat Enterprise Linux 8.8 variants. The update is rated as Important by Red Hat Product Security.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat Enterprise Linux 7 Extended Lifecycle Support update. These include a clickjacking vulnerability that could leak saved payment card details, potential local code execution via the 'Copy as cURL' command, several memory safety bugs, leakage of cross-origin resource status through script element events, and improper isolation of error handling for script execution from web content. The update is rated as having an important security impact by Red Hat.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 9.0. These include a clickjacking vulnerability potentially leaking saved payment card details, potential local code execution via the 'Copy as cURL' command, several memory safety bugs, leakage of cross-origin resource status through script element events, and improper isolation of error handling for script execution from web content. The update is rated as having an important security impact by Red Hat. No CVSS scores are provided in the advisory.

A security update for Mozilla Firefox and Thunderbird addresses multiple vulnerabilities including clickjacking that could leak saved payment card details, potential local code execution via the 'Copy as cURL' command, memory safety bugs, cross-origin information leakage through script element events, and improper isolation of script execution error handling from web content. These issues were identified and fixed in Red Hat Enterprise Linux 8.4 packages.

Multiple security vulnerabilities affecting Mozilla Firefox and Thunderbird have been addressed in a Red Hat security update for Red Hat Enterprise Linux 8.2. These include a clickjacking vulnerability that could leak saved payment card details, potential local code execution via the 'Copy as cURL' command, several memory safety bugs, cross-origin resource status leakage through script element events, and improper isolation of error handling for script execution from web content. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities have been identified and fixed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 8. These include issues such as JavaScript execution via spoofed PDF attachments, sender spoofing, unsolicited file downloads, tracking link bypasses, out-of-bounds memory access, clickjacking, and memory safety bugs. The Red Hat advisory RHSA-2025:8756 provides updates addressing these vulnerabilities. The update is rated as important by Red Hat Product Security.

Multiple security vulnerabilities have been identified and addressed in Mozilla Thunderbird as packaged for Red Hat Enterprise Linux 9.2. These include out-of-bounds memory access, clickjacking leading to potential leakage of saved payment card details, local code execution risks, memory safety bugs, and improper isolation of script execution from web content. Red Hat has released an important security update to fix these issues in Thunderbird version 128.11.0-1.el9_2 across various architectures.