Firefox / Thunderbird vulnerabilities

A vulnerability in Firefox and Thunderbird allows an attacker to determine if an application implementing a specific protocol handler is installed by checking the results of window.open calls with specially set protocol handlers. This affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

A vulnerability in Firefox allows appref-ms files to be opened without warning the user that they may contain malicious code. This affects Firefox versions below 116 and Thunderbird versions below 102.14 and 115.1 on Windows.

The vulnerability in Firefox and Thunderbird involves the lack of a warning for users when opening Diagcab files that may contain malicious code. This affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

Vulnerability in Firefox browser and Thunderbird mail client. A malicious webpage could access the InstallTrigger object, potentially leading to installation of an unintended or malicious extension.