Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2025-1933, CVE-2025-1934, CVE-2025-1935, CVE-2025-1936, CVE-2025-1937, CVE-2025-1942)
It was discovered that Firefox did not properly handle WebTransport connection, leading to a use-after-free vulnerability. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2025-1931)
Ivan Fratric discovered that Firefox did not properly handle XSLT sorting, leading to a out-of-bounds access vulnerability. An attacker could potentially exploit this issue to cause a denial of service, or execute arbitrary code. (CVE-2025-1932)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "firefox", "binary_version": "136.0+build3-0ubuntu0.20.04.1" }, { "binary_name": "firefox-dev", "binary_version": "136.0+build3-0ubuntu0.20.04.1" }, { "binary_name": "firefox-geckodriver", "binary_version": "136.0+build3-0ubuntu0.20.04.1" }, { "binary_name": "firefox-mozsymbols", "binary_version": "136.0+build3-0ubuntu0.20.04.1" } ] }