Cert-In-Advisories

[CIVN-20255-0156] Multiple Vulnerabilities in Mozilla Products

By TeamwinPublished On: July 25, 2025

—–BEGIN PGP SIGNED MESSAGE—–

Hash: SHA256

Multiple Vulnerabilities in Mozilla Products

Indian – Computer Emergency Response Team (https://www.cert-in.org.in)

Severity Rating: HIGH

Software Affected

Mozilla Firefox versions prior to 141

Mozilla ESR versions prior to 115.26

Mozilla ESR versions prior to 128.13

Mozilla ESR versions prior to 140.1

Mozilla iOS versions prior to 141

Mozilla Thunderbird versions prior to 128.13

Mozilla Thunderbird versions prior to 140.1

Mozilla Thunderbird versions prior to 141

Overview

Multiple vulnerabilities have been reported in Mozilla products which could allow an attacker to bypass security restrictions, access sensitive information or execute arbitrary code on the targeted system.

Target Audience:

All end-user organizations and individuals using Mozilla Firefox and Thunderbird.

Risk Assessment:

High risk of unauthorized access to sensitive information.

Impact Assessment:

Potential for data theft, sensitive information disclosure and complete compromise of system.

Description

Mozilla Firefox is a free and open-source web browser developed by Mozilla foundation, while Firefox ESR (Extended Support Release) is a stable version tailored for organizations that require long-term support with only security and maintenance updates.

Multiple vulnerabilities exist in Mozilla products due to memory corruption and other issues. An attacker could exploit these vulnerabilities by convincing a victim to open a specially crafted web request or email.

Successful exploitation of these vulnerabilities could allow a remote attacker to bypass security restrictions, access sensitive information or remote code execution on the targeted system.

Solution

Apply appropriate updates as mentioned by the vendor:

https://www.mozilla.org/en-US/security/advisories/mfsa2025-56/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-57/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-58/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-59/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-60/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-61/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-62/

https://www.mozilla.org/en-US/security/advisories/mfsa2025-63/

References

Mozilla