Firefox vulnerabilities

Memory safety bugs were found in Firefox 152.0.3. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code with enough effort. This vulnerability was fixed in Firefox 152.0.4.

A sandbox escape vulnerability exists in the Networking component of Firefox and Thunderbird due to incorrect boundary conditions. This flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability in the Security: Process Sandboxing component. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability exists in the DOM: Navigation component of Firefox and Thunderbird. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A sandbox escape vulnerability exists in the DOM: Workers component of Firefox and Thunderbird. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A vulnerability in the Networking component of Firefox and Thunderbird allows bypassing the same-origin policy (SOP) in the DOM. The flaw was fixed in version 151 of both products.

A sandbox escape vulnerability exists in the Profile Backup component of Firefox and Thunderbird. This flaw was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

Incorrect boundary conditions in the Audio/Video: Playback component in Firefox. This vulnerability was fixed in Firefox 150, Thunderbird 150, Firefox ESR 140.10.1, Thunderbird 140.10.1, and Firefox ESR 115.35.2.

Uninitialized memory vulnerability in the Audio/Video: Web Codecs component of Firefox and Thunderbird. The flaw was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Memory safety bugs were found in Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code. The vulnerability was fixed in versions 149.0.2.

Memory safety bugs exist in Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1 and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code.

Memory safety bugs were found in Firefox ESR 115.34.0, Firefox ESR 140.9.0, Thunderbird ESR 140.9.0, Firefox 149.0.1, and Thunderbird 149.0.1. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code. The vulnerability was fixed in Firefox 149.0.2, Firefox ESR 115.34.1, Firefox ESR 140.9.1, Thunderbird 149.0.2, and Thunderbird 140.9.1.

Memory safety bugs were found in Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird ESR 140.8, Firefox 148, and Thunderbird 148. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code.

A mitigation bypass vulnerability exists in the Networking: HTTP component of Firefox and Thunderbird. The flaw was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

A JIT miscompilation vulnerability was found in the JavaScript Engine of Firefox and Thunderbird. It was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

A use-after-free vulnerability was found in the Layout: Text and Fonts component. This flaw was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

A sandbox escape vulnerability exists in the Responsive Design Mode component. This flaw was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

Use-after-free vulnerability in the CSS Parsing and Computation component of Firefox and Thunderbird. The flaw was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

A sandbox escape vulnerability due to a use-after-free bug in the Disability Access APIs component. The flaw was fixed in Firefox 149, Firefox ESR 140.9, Thunderbird 149, and Thunderbird 140.9.

A use-after-free vulnerability was found in the DOM: Core & HTML component of Firefox and Thunderbird. The flaw was fixed in version 148 of both applications.

A use-after-free vulnerability was found in the JavaScript: GC component of Firefox and Thunderbird. This flaw was fixed in versions 148 of both products.

A JIT miscompilation vulnerability exists in the JavaScript: WebAssembly component of Firefox and Thunderbird. This flaw was fixed in versions 148 of both products.

A use-after-free vulnerability was found in the JavaScript: GC component of Firefox and Thunderbird. This flaw was fixed in versions 148 of both applications.

Memory safety bugs were found in Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird ESR 140.7, Firefox 147, and Thunderbird 147. Some of these bugs caused memory corruption, which could potentially allow arbitrary code execution.

A sandbox escape vulnerability due to incorrect boundary conditions in the DOM: Core & HTML component. This flaw was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A sandbox escape vulnerability exists in the Telemetry component of external software due to incorrect boundary conditions. This flaw has been fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A mitigation bypass vulnerability exists in the DOM: HTML Parser component of Firefox and Thunderbird. The flaw was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

An integer overflow was found in the Audio/Video component of Firefox and Thunderbird. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Use-after-free vulnerability in the Audio/Video: Playback component of Firefox and Thunderbird. Fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Undefined behavior was discovered in the DOM: Core & HTML component of Firefox and Thunderbird. The vulnerability has been fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

Use-after-free vulnerability in the DOM: Bindings (WebIDL) component. Fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A sandbox escape vulnerability exists in the Storage: IndexedDB component. This flaw was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A use-after-free vulnerability was found in the JavaScript: WebAssembly component, fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A use-after-free vulnerability was found in the JavaScript Engine: JIT component. The flaw was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A use-after-free vulnerability was found in the JavaScript Engine component of Firefox and Thunderbird. It was fixed in Firefox 148, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A vulnerability in the JavaScript engine's JIT component causes a miscompilation and use-after-free issue. It was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A vulnerability in the Graphics: ImageLib component of Firefox and Thunderbird is caused by incorrect boundary conditions. This flaw may lead to unexpected behavior when processing images.

A use-after-free vulnerability was found in the JavaScript: GC component of Firefox and Thunderbird. It was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8.

A sandbox escape vulnerability exists in the Graphics component of Firefox and Thunderbird due to incorrect boundary conditions. The flaw is fixed in Firefox 147, Firefox ESR 115.32, Firefox ESR 140.7, Thunderbird 147, and Thunderbird 140.7.

Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Race condition vulnerability in the JavaScript Engine component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Mitigation bypass in the Data Loss Prevention component. Fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Denial-of-service vulnerability in the Widget component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Site isolation issue in the Audio/Video: Web Codecs component. Fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1.

Clickjacking issue in the Downloads component in Firefox for Android. This vulnerability was fixed in Firefox 154.

JIT miscompilation in the JavaScript Engine: JIT component. Fixed in Firefox 154, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Same-origin policy bypass in the Graphics: ImageLib component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.

Race condition, use-after-free in the Graphics component. This vulnerability was fixed in Firefox 154, Firefox ESR 115.39, Firefox ESR 140.14, Firefox ESR 153.1, Thunderbird 154, Thunderbird 140.14, and Thunderbird 153.1.