REDHAT-BUG-2489231: Medium severity Mozilla Firefox vulnerability

Published Jun 16, 2026

Updated

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 152 and Firefox ESR 140.12.

Affected Software

2 affected components

Mozilla Firefox

Mozilla Firefox ESR

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Firefox to a version that resolves this vulnerability.
Fixed in 152
Upgrade
Upgrade Firefox ESR to a version that resolves this vulnerability.
Fixed in 140.12

Event History

Jun 16, 2026

Data Sourced

via Red Hat·02:02 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of REDHAT-BUG-2489231?

The severity of REDHAT-BUG-2489231 is classified as medium with a score of 4.

What is the cause of REDHAT-BUG-2489231?

REDHAT-BUG-2489231 is caused by a mitigation bypass in the DOM: Security component of Mozilla Firefox.

How do I fix REDHAT-BUG-2489231?

To fix REDHAT-BUG-2489231, upgrade to Firefox version 152 or Firefox ESR version 140.12 or later.

When was REDHAT-BUG-2489231 published?

REDHAT-BUG-2489231 was published on June 16, 2026.

What versions of Firefox are affected by REDHAT-BUG-2489231?

REDHAT-BUG-2489231 affects earlier versions of Mozilla Firefox and Mozilla Firefox ESR prior to the fixes implemented in version 152 and 140.12 respectively.