- 214/2025
- High
Mozilla has released an updated Firefox version 143.0.3 to fix multiple vulnerabilities.
The addressed vulnerabilities could allow the attacker to bypass security restrictions, obtain sensitive information, execute arbitrary code, and gain access to the affected system.
The addressed vulnerabilities:
1. Mozilla Firefox Sandbox escape due to integer overflow in the Graphics: Canvas2D component (CVE-2025-11152):
- CVSS: 8.6
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Gain Access
2. Mozilla Firefox JIT miscompilation in the JavaScript Engine (CVE-2025-11153):
- CVSS: 7.5
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Gain Access
Vulnerabilities
- CVE-2025-11152
- CVE-2025-11153
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.