Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2025-0237,
CVE-2025-0239, CVE-2025-0240, CVE-2025-0242, CVE-2025-0243, CVE-2025-0247)
Irvan Kurniawan discovered that Firefox incorrectly handled memory when
breaking lines in text, leading to a use-after-free vulnerability. An
attacker could possibly use this issue to cause a denial of service or
possibly execute arbitrary code. (CVE-2025-0238)
Nils Bars discovered that Firefox incorrectly handled memory when using
JavaScript Text Segmentation. An attacker could possibly use this issue to
cause a denial of service. (CVE-2025-0241)
update to 8.0.2
fixes CVE-2024-46981 – Lua script commands may lead to remote code execution
fixes CVE-2024-51741 – Denial-of-service due to malformed ACL selectors
update to 8.0.2
fixes CVE-2024-46981 – Lua script commands may lead to remote code execution
fixes CVE-2024-51741 – Denial-of-service due to malformed ACL selectors
update to 8.0.2
fixes CVE-2024-46981 – Lua script commands may lead to remote code execution
fixes CVE-2024-51741 – Denial-of-service due to malformed ACL selectors
update to 8.0.2
fixes CVE-2024-46981 – Lua script commands may lead to remote code execution
fixes CVE-2024-51741 – Denial-of-service due to malformed ACL selectors
