RHSA-2025:21281: CVEs fixed (Red Hat)

RHSA-2025:21281 fixes 6 tracked CVEs. Affected systems and fixed versions.

• CVE-2025-13014 HIGH 8.8 UPGRADE Use-after-free in the Audio/Video component
• CVE-2025-13020 HIGH 8.8 UPGRADE Use-after-free in the WebRTC: Audio/Video component
• CVE-2025-13016 HIGH 7.5 UPGRADE Incorrect boundary conditions in the JavaScript: WebAssembly component
• CVE-2025-13017 HIGH 8.1 UPGRADE Same-origin policy bypass in the DOM: Notifications component
• CVE-2025-13018 HIGH 8.1 UPGRADE Mitigation bypass in the DOM: Security component
• CVE-2025-13019 HIGH 8.1 UPGRADE Same-origin policy bypass in the DOM: Workers component

Applies to

• RHEL 10 · fixed in firefox-140.5.0-2.el10_1

← Back to latest CVEs