Mozilla Issues Urgent Firefox Update to Patch Critical Code Execution Flaws

The Mozilla Foundation issued three critical security advisories on 11 November 2025, addressing 16 unique vulnerabilities across multiple Firefox versions and platforms. The updates affect Firefox 145, Firefox ESR 115.30, and Firefox ESR 140.5, with 12 vulnerabilities rated High impact and a further 14 rated Moderate, affecting millions of users worldwide.

The most severe flaws enable remote code execution and sandbox escape attacks through WebGPU graphics processing, JavaScript engine miscompilation, and race conditions in the Graphics component, while several Same-origin policy bypasses could allow data access or code injection across sites. According to Mozilla’s impact classification, High-impact vulnerabilities can be exploited by attackers to run arbitrary code and install malicious software requiring no user interaction beyond regular browsing activity. Mozilla recommends immediate updating to the latest versions via automatic updates or by visiting its official site.