Firefox vulnerabilities

Privilege escalation in WebExtensions. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Information disclosure vulnerability in the Storage: IndexedDB component. This flaw was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Information disclosure vulnerability due to uninitialized memory in the Graphics: WebGPU component. This flaw was fixed in Firefox 153 and Thunderbird 153.

Information disclosure vulnerability due to uninitialized memory in the Graphics: WebGPU component. This flaw was fixed in Firefox 153 and Thunderbird 153.

Information disclosure vulnerability due to uninitialized memory in the Graphics: WebGPU component. This flaw was fixed in Firefox 153 and Thunderbird 153.

Vulnerability in Firefox and Thunderbird (DOM: Content Processes component) allows privilege escalation. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Other issue in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Denial-of-service vulnerability in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 153 and Thunderbird 153.

Information disclosure vulnerability in the Framework component in DevTools. This flaw was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Vulnerability in the DOM: Content Processes component in Firefox and Thunderbird allows privilege escalation. Fixed in version 153.

Privilege escalation in the DOM: Navigation component. This vulnerability was fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, Thunderbird 140.13, Firefox ESR 140.15, and Thunderbird 140.15.

Vulnerability in the DOM: Navigation component in Firefox and Thunderbird allows privilege escalation. Fixed in version 153.

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 153, Thunderbird 153, Firefox ESR 140.15, and Thunderbird 140.15.

Use-after-free vulnerability in the WebRTC: Audio/Video component of Firefox and Thunderbird. Fixed in Firefox 153, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

Information disclosure vulnerability in the Graphics: ImageLib component. This flaw was fixed in Firefox 153, Firefox ESR 115.38, Firefox ESR 140.13, Thunderbird 153, and Thunderbird 140.13.

A vulnerability in Firefox and Thunderbird with public exploit code but no known active attacks. Fixed in Firefox 152.0.6, Firefox ESR 115.38, Firefox ESR 140.13, and Thunderbird 140.13.

This vulnerability was fixed in Firefox 152.0.6, Firefox ESR 140.13, and Thunderbird 140.13. Exploit code is publicly available, but no attacks in the wild are known.

Memory safety bugs were found in Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird ESR 140.11, Firefox 151 and Thunderbird 151. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code.

A JIT miscompilation vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. The flaw was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

A use-after-free vulnerability was found in the Networking: HTTP component of Firefox and Thunderbird. It was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12.

JIT miscompilation in the JavaScript Engine of Firefox. This vulnerability was fixed in version 151.0.3.

Incorrect boundary conditions in the Graphics: Text component in Firefox. This vulnerability was fixed in Firefox 151.0.3.

Memory safety bugs were present in Firefox ESR 115.35, Firefox ESR 140.10 and Firefox 150, which could allow remote code execution. The vulnerability was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Memory safety bugs present in Firefox ESR 140.10 and Firefox 150 could lead to memory corruption and potentially allow arbitrary code execution. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Memory safety bugs present in Firefox 150 showed evidence of memory corruption and could potentially be exploited to run arbitrary code. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

Privilege escalation vulnerability in the WebRTC: Audio/Video component in Firefox and Thunderbird. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

Privilege escalation vulnerability in the Security component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

In Firefox and Thunderbird 151, a mitigation bypass vulnerability in the DOM: Security component was fixed. An attacker could bypass security measures.

A denial-of-service vulnerability due to an invalid pointer in the Audio/Video: Web Codecs component. Fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Information disclosure vulnerability in the Graphics: WebGPU component in Firefox and Thunderbird. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

Information disclosure vulnerability in the IP Protection component in Firefox and Thunderbird. This vulnerability was fixed in Firefox 151 and Thunderbird 151.

An information disclosure vulnerability exists in the DOM: Security component of Firefox and Thunderbird. This flaw was fixed in Firefox 151 and Thunderbird 151.

Spoofing vulnerability in the Web Speech component of Firefox and Thunderbird. Fixed in version 151.

A vulnerability in the DOM: Security component of Firefox and Thunderbird. The issue was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

A Spoofing vulnerability in the Form Autofill component of Firefox and Thunderbird. The issue was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

Use-after-free vulnerability in the DOM: Bindings (WebIDL) component of Firefox and Thunderbird. The flaw was fixed in Firefox 151, Firefox ESR 115.36, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11.

A sandbox escape vulnerability in Firefox and Firefox Focus for Android. This flaw was fixed in Firefox 151.

A use-after-free vulnerability was found in the JavaScript: WebAssembly component of Firefox. This flaw was fixed in Firefox 150.0.3.

A JIT miscompilation vulnerability exists in the JavaScript Engine of Firefox, which could lead to unexpected behavior. This issue was fixed in Firefox 150.0.3.

A vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird is caused by incorrect boundary conditions. The flaw was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11.

A use-after-free vulnerability was found in the DOM: Networking component of Firefox and Thunderbird. The flaw was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2.

An information disclosure vulnerability in the Audio/Video component of Firefox and Thunderbird due to incorrect boundary conditions. The flaw is fixed in Firefox 150.0.1, Firefox ESR 140.10.1, Firefox ESR 115.35.1, Thunderbird 150.0.1, and Thunderbird 140.10.1.

Memory safety bugs were found in Firefox ESR 140.9, Firefox 149, Thunderbird ESR 140.9, and Thunderbird 149. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code with enough effort.

Memory safety bugs were found in Firefox ESR 115.34, Firefox ESR 140.9, Thunderbird ESR 140.9, Firefox 149, and Thunderbird 149. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code. The vulnerabilities were fixed in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

Memory safety bugs were found in Firefox 149 and Thunderbird 149. Some of these bugs showed evidence of memory corruption, potentially allowing arbitrary code execution. The vulnerability was fixed in Firefox 150 and Thunderbird 150.

Vulnerability involving an invalid pointer in the Audio/Video: Playback component. It was fixed in Firefox 150 and Thunderbird 150.

Information disclosure vulnerability in the Form Autofill component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

A mitigation bypass vulnerability exists in the File Handling component. It was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

An invalid pointer vulnerability exists in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10.

A mitigation bypass vulnerability exists in the DOM: postMessage component. It was fixed in Firefox 150 and Thunderbird 150.