Test ID:	1.3.6.1.4.1.25623.1.2.1.2025.28
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2025-28) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: CVE-2025-2817: Privilege escalation in Firefox Updater Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the user-privileged process, an attacker could bypass intended access controls, allowing SYSTEM-level file operations on paths controlled by a non-privileged user and enabling privilege escalation. CVE-2025-4083: Process isolation bypass using 'javascript:' URI links in cross-origin frames A process isolation vulnerability in Firefox stemmed from improper handling of javascript: URIs, which could allow content to execute in the top-level document's process instead of the intended frame, potentially enabling a sandbox escape. CVE-2025-4085: Potential information leakage and privilege escalation in UITour actor An attacker with control over a content process could potentially leverage the privileged UITour actor to leak sensitive information or escalate privileges. CVE-2025-4087: Unsafe attribute access during XPath parsing A vulnerability was identified in Firefox where XPath parsing could trigger undefined behavior due to missing null checks during attribute access. This could lead to out-of-bounds read access and potentially, memory corruption. CVE-2025-4088: Cross-site request forgery via storage access API redirects A security vulnerability in Firefox allowed malicious sites to use redirects to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. CVE-2025-4089: Potential local code execution in 'copy as cURL' command Due to insufficient escaping of special characters in the 'copy as cURL' feature, an attacker could trick a user into using this command, potentially leading to local code execution on the user's system. CVE-2025-4091: Memory safety bugs fixed in Firefox 138, Thunderbird 138, Firefox ESR 128.10, and Thunderbird 128.10 Memory safety bugs present in Firefox 137, Thunderbird ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: Firefox version(s) below 138. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-2817 Common Vulnerability Exposure (CVE) ID: CVE-2025-4083 Common Vulnerability Exposure (CVE) ID: CVE-2025-4085 Common Vulnerability Exposure (CVE) ID: CVE-2025-4087 Common Vulnerability Exposure (CVE) ID: CVE-2025-4088 Common Vulnerability Exposure (CVE) ID: CVE-2025-4089 Common Vulnerability Exposure (CVE) ID: CVE-2025-4091 Common Vulnerability Exposure (CVE) ID: CVE-2025-4092
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.