RHSA-2025:18154: CVEs fixed (Red Hat)
RHSA-2025:18154 fixes 3 tracked CVEs. Affected systems and fixed versions.
- CVE-2025-11708 CRITICAL 9.8 UPGRADE UPGRADE Use-after-free in MediaTrackGraphImpl::GetInstance()
- CVE-2025-11709 CRITICAL 9.8 UPGRADE UPGRADE A compromised web process was able to trigger out of bounds reads and writes in a more privileged process usin
- CVE-2025-11710 CRITICAL 9.8 UPGRADE UPGRADE A compromised web process using malicious IPC messages could have caused the privileged browser process to rev
Applies to
- RHEL 10 · fixed in firefox-140.4.0-3.el10_0