遠端主機上安裝的 mozilla-firefox 版本比 140.5.0esr 舊。因此會受到 SSA:2025-315-01 公告中提及的多個弱點影響。

    現已提供適用於 Slackware 15.0 和最新版本的新 mozilla-firefox 套件，可修復安全性問題。

Tenable 已直接從 mozilla-firefox 安全公告擷取前置描述區塊。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the c894635c-c0b6-11f0-ab42-b42e991fc52e advisory.

    https://bugzilla.mozilla.org/show_bug.cgi?id=1995686 reports:

Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-2d9e01e0fc advisory.

    - Updated to latest upstream (145.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-457ee8a964 advisory.

    - Updated to latest upstream (145.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-88 advisory.

  - Use-after-free in the Audio/Video component. This vulnerability affects Firefox < 145, Firefox ESR <     140.5, and Firefox ESR < 115.30. (CVE-2025-13014)

  - Use-after-free in the WebRTC: Audio/Video component. This vulnerability affects Firefox < 145 and Firefox     ESR < 140.5. (CVE-2025-13020)

  - Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5,     and Firefox ESR < 115.30. (CVE-2025-13012)

  - Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox     < 145 and Firefox ESR < 140.5. (CVE-2025-13016)

  - Same-origin policy bypass in the DOM: Notifications component. This vulnerability affects Firefox < 145     and Firefox ESR < 140.5. (CVE-2025-13017)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 145.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2025-87 advisory.

  - Memory safety bugs present in Firefox 144 and Thunderbird 144. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. (CVE-2025-13027)

  - Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability affects Firefox < 145.
    (CVE-2025-13021, CVE-2025-13022, CVE-2025-13025)

  - Race condition in the Graphics component. This vulnerability affects Firefox < 145, Firefox ESR < 140.5,     and Firefox ESR < 115.30. (CVE-2025-13012)

  - Sandbox escape due to incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability     affects Firefox < 145. (CVE-2025-13023, CVE-2025-13026)

  - Incorrect boundary conditions in the JavaScript: WebAssembly component. This vulnerability affects Firefox     < 145 and Firefox ESR < 140.5. (CVE-2025-13016)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 12 / 13 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-6059 advisory.

    - -------------------------------------------------------------------------     Debian Security Advisory DSA-6059-1                   security@debian.org     https://www.debian.org/security/                       Moritz Muehlenhoff     November 16, 2025                     https://www.debian.org/security/faq
    - -------------------------------------------------------------------------

    Package        : thunderbird     CVE ID         : CVE-2025-13012 CVE-2025-13013 CVE-2025-13014                      CVE-2025-13015 CVE-2025-13016 CVE-2025-13017                      CVE-2025-13018 CVE-2025-13019 CVE-2025-13020

    Multiple security issues were discovered in Thunderbird, which could     result in the execution of arbitrary code.

    For the oldstable distribution (bookworm), these problems have been fixed     in version 1:140.5.0esr-1~deb12u1.

    For the stable distribution (trixie), these problems have been fixed in     version 1:140.5.0esr-1~deb13u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian Security Advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://www.debian.org/security/

    Mailing list: debian-security-announce@lists.debian.org

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
274813	Slackware Linux 15.0 / 最新版 mozilla-firefox 多個弱點 (SSA:2025-315-01)	Nessus	Slackware Local Security Checks	2025/11/11	2025/11/11	high
275476	FreeBSD : firefox -- Use-after-free (c894635c-c0b6-11f0-ab42-b42e991fc52e)	Nessus	FreeBSD Local Security Checks	2025/11/14	2025/11/14	high
275255	Fedora 43 : firefox (2025-2d9e01e0fc)	Nessus	Fedora Local Security Checks	2025/11/12	2025/11/12	critical
275384	Fedora 42 : firefox (2025-457ee8a964)	Nessus	Fedora Local Security Checks	2025/11/13	2025/11/13	critical
274755	Mozilla Firefox ESR < 140.5	Nessus	MacOS X Local Security Checks	2025/11/11	2025/11/14	high
274834	Mozilla Firefox < 145.0	Nessus	Windows	2025/11/11	2025/11/14	critical
275515	Debian dsa-6059 : thunderbird - security update	Nessus	Debian Local Security Checks	2025/11/16	2025/11/16	high

偵測

搜尋 Plugin

high

high

critical

critical

high

critical

high