Mozilla Foundation Security Advisory 2025-93
Security Vulnerabilities fixed in Firefox ESR 115.31
- Announced
- December 9, 2025
- Impact
- high
- Products
- Firefox ESR
- Fixed in
-
- Firefox ESR 115.31
#CVE-2025-14322: Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component
- Reporter
- Oskar L
- Impact
- high
References
#CVE-2025-14323: Privilege escalation in the DOM: Notifications component
- Reporter
- tiebuchen
- Impact
- high
References
#CVE-2025-14324: JIT miscompilation in the JavaScript Engine: JIT component
- Reporter
- Lingming Zhang
- Impact
- high
References
#CVE-2025-14331: Same-origin policy bypass in the Request Handling component
- Reporter
- Igor Morgenstern
- Impact
- moderate