Firefox vulnerabilities

A privilege escalation vulnerability in the DOM: Navigation component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

A vulnerability in the DOM: Editor component is due to incorrect boundary conditions. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

A vulnerability in the Layout component is due to incorrect boundary conditions. It was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Workers component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Information disclosure vulnerability in the Networking component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.

Use-after-free vulnerability in the JavaScript: WebAssembly component of Firefox and Thunderbird. The flaw was fixed in Firefox 158 and Thunderbird 158.

Other issue in the Address Bar component. It was fixed in Firefox 158 and Thunderbird 158.

Mitigation bypass in the DOM: Security component. It was fixed in Firefox 158 and Thunderbird 158.

Other issue in the DOM: File component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Privilege escalation vulnerability in the Panning and Zooming component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Information disclosure vulnerability in the PDF Viewer component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the Storage: Bucket File System component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Privilege escalation vulnerability in the WebExtensions component. The flaw was fixed in Firefox 158 and Thunderbird 158.

Use-after-free vulnerability in the Audio/Video: Playback component of Firefox and Thunderbird. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Mitigation bypass in the Enterprise Policies component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Frame poisoning vulnerability in the Layout component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Animation component of Firefox and Thunderbird. Fixed in version 158.

Mitigation bypass in the DOM: Security component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

JIT miscompilation in the JavaScript Engine: JIT component. The flaw was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Streams component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Incorrect boundary conditions in the Graphics: Canvas2D component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Integer overflow in the Graphics component. The flaw was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the JavaScript Engine: JIT component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Animation component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the Audio/Video component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the SVG component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Core & HTML component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Integer overflow in the Layout: Text and Fonts component. The flaw was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

JIT miscompilation in the JavaScript Engine causes incorrect code execution. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Incorrect boundary conditions in the JavaScript Engine: JIT component. The vulnerability was fixed in Firefox 158, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

JIT miscompilation in the JavaScript: WebAssembly component. The vulnerability was fixed in Firefox 158, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Race condition and use-after-free vulnerability in the Graphics: CanvasWebGL component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the XML component of Firefox and Thunderbird. Fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the DOM: Bindings (WebIDL) component of Firefox and Thunderbird. It can lead to arbitrary code execution or application crash. The issue was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Incorrect boundary conditions in the JavaScript Engine component. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Incorrect boundary conditions in the JavaScript Engine component. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Incorrect boundary conditions in the Layout component. The vulnerability was fixed in Firefox 158 and Thunderbird 158.

Use-after-free vulnerability in the Crash Reporting component of Firefox and Thunderbird. It can lead to arbitrary code execution or application crash. The issue was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Sandbox escape due to uninitialized memory in the Graphics component. The vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

Use-after-free vulnerability in the Graphics: Canvas2D component of Firefox and Thunderbird. It can lead to arbitrary code execution or application crash. The issue was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the Graphics: Text component of Firefox and Thunderbird. It can lead to arbitrary code execution or application crash. The issue was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

An information disclosure and privilege escalation vulnerability in the Security: Process Sandboxing component. It was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Use-after-free vulnerability in the Storage: IndexedDB component of Firefox and Thunderbird. It can lead to arbitrary code execution or application crash. The issue was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Privilege escalation in the Application Update component. The vulnerability was fixed in Firefox 158, Firefox ESR 153.5, and Thunderbird 158 and 153.5.

An information disclosure vulnerability was found in the Networking component of Mozilla products. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, and Firefox ESR 140.17.

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 140.17, Thunderbird 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.

Mitigation bypass in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.