Cert-In-Advisories

[CIVN-2025-0194] Multiple Vulnerabilities in Mozilla Products

By TeamwinPublished On: August 26, 2025

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Mozilla Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Mozilla Firefox versions prior to 142

Mozilla Firefox ESR versions prior to 115.27

Mozilla Firefox ESR versions prior to 128.14

Mozilla Firefox ESR versions prior to 140.2

Mozilla Firefox for iOS versions prior to 142

Mozilla Focus for iOS versions prior to 142

Mozilla Thunderbird versions prior to 128.14

Mozilla Thunderbird versions prior to 140.2

Mozilla Thunderbird versions prior to 142

Overview

Multiple vulnerabilities have been reported in Mozilla products which could allow an attacker to execute arbitrary code, bypass security restrictions, cause denial of service (DoS) condition or perform spoofing attacks on the targeted system.

Target Audience:

All end-user organizations and individuals using Mozilla Firefox, Focus and Thunderbird.

Risk Assessment:

High risk of unauthorized access to sensitive information.

Impact Assessment:

Potential for data theft, sensitive information disclosure and complete compromise of system.

Description

Mozilla Firefox is a free and open-source web browser developed by Mozilla foundation, while Firefox ESR (Extended Support Release) is a stable version tailored for organizations that re-quire long-term support with only security and maintenance updates.

Multiple vulnerabilities exist in Mozilla products due to memory corruption and other issues.

Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code, bypass security restrictions, cause denial of service (DoS) condition or perform spoofing attacks on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor:

https://www.mozilla.org/en-US/security/advisories/mfsa2025-64/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-65/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-66/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-67/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-68/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-69/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-70/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-71/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-72/

References

Mozilla