Mozilla Products October 2025 Secondary Security Update Advisory

Overview

 

An update has been made available to address a vulnerability in Mozilla products (Firefox versions). Users of affected products are advised to update to the latest version.

 

Affected Products

 

Firefox versions prior to 144.0.2

 

Resolved Vulnerabilities

 

A high-level memory free-and-reuse (UAF) vulnerability exists in Firefox (CVE-2025-12380) [1]

 

Vulnerability Patches

 

The following Vulnerability Patches were made available in the October 28, 2025 update. For more information on Vulnerability Patches, please refer to the “Mozilla” Referenced Sites documentation.

Firefox version 144.0.2

 

Referenced Sites

 

[1] Security Vulnerabilities fixed in Firefox 144.0.2

https://www.mozilla.org/en-US/security/advisories/mfsa2025-86/

[2] Update Firefox to the latest release

https://support.mozilla.org/ko/kb/update-firefox-latest-release