RHSA-2026:0127: firefox Red Hat

CVSS: 7.5v3.1HighPublished

Published 07-01-2026Last modified 17-10-2026

Open JSON

Vulnerability summary

RHSA-2026:0127 is a high (CVSS 7.5) vulnerability in firefox Red Hat.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 10 · Downstream 0

CVE-2025-14321 CVE-2025-14322 CVE-2025-14323 CVE-2025-14324 CVE-2025-14325 CVE-2025-14328+4 more

Timeline

07-01-2026
PublishedVulnerability first disclosed.
17-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: firefox security update

CVSS metrics

1 score · 1 source · 1 version

v3.17.5

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat3 products

firefox< 0:140.6.0-1.el10_0
firefox-debuginfo< 0:140.6.0-1.el10_0
firefox-debugsource< 0:140.6.0-1.el10_0

1 vendor · 3 products

References

54 links

Show all 54 references

bugzilla.redhat.com/show_bug.cgi?id=2420516REPORT
bugzilla.redhat.com/show_bug.cgi?id=2420517REPORT
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_0127.jsonAdvisory
access.redhat.com/security/cve/CVE-2025-14321REPORT
www.cve.org/CVERecord?id=CVE-2025-14321Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14321Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
www.mozilla.org/security/advisories/mfsa2025-96/ARTICLE
access.redhat.com/security/cve/CVE-2025-14322REPORT
www.cve.org/CVERecord?id=CVE-2025-14322Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14322Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14323REPORT
www.cve.org/CVERecord?id=CVE-2025-14323Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14323Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14324REPORT
www.cve.org/CVERecord?id=CVE-2025-14324Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14324Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14325REPORT
www.cve.org/CVERecord?id=CVE-2025-14325Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14325Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14328REPORT
www.cve.org/CVERecord?id=CVE-2025-14328Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14328Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14329REPORT
www.cve.org/CVERecord?id=CVE-2025-14329Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14329Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14330REPORT
www.cve.org/CVERecord?id=CVE-2025-14330Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14330Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14331REPORT
www.cve.org/CVERecord?id=CVE-2025-14331Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14331Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE
access.redhat.com/security/cve/CVE-2025-14333REPORT
www.cve.org/CVERecord?id=CVE-2025-14333Advisory
nvd.nist.gov/vuln/detail/CVE-2025-14333Advisory
www.mozilla.org/security/advisories/mfsa2025-94/ARTICLE