RHSA-2025:22371: CVEs fixed (Red Hat)

RHSA-2025:22371 fixes 6 tracked CVEs. Affected systems and fixed versions.

• CVE-2025-13014 HIGH 8.8 UPGRADE Use-after-free in the Audio/Video component
• CVE-2025-13020 HIGH 8.8 UPGRADE Use-after-free in the WebRTC: Audio/Video component
• CVE-2025-13016 HIGH 7.5 UPGRADE Incorrect boundary conditions in the JavaScript: WebAssembly component
• CVE-2025-13017 HIGH 8.1 UPGRADE Same-origin policy bypass in the DOM: Notifications component
• CVE-2025-13018 HIGH 8.1 UPGRADE Mitigation bypass in the DOM: Security component
• CVE-2025-13019 HIGH 8.1 UPGRADE Same-origin policy bypass in the DOM: Workers component

Applies to

• RHEL 7 Extended Lifecycle Support · fixed in firefox-140.5.0-1.el7_9

← Back to latest CVEs