Andrew Osmond

**Name of the Vulnerable Software and Affected Versions** Thunderbird version 150 Firefox version 150 **Description** Memory safety bugs involving memory corruption may allow an attacker to execute arbitrary code. **Recommendations** Update Thunderbird to version 151. Update Firefox to version 151.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 145 Firefox ESR versions prior to 140.5 Firefox ESR versions prior to 115.30 **Description** A use-after-free issue exists in the Audio/Video component. **Recommendations** Update Firefox to version 145 or later. Update Firefox ESR to version 140.5 or later. Update Firefox ESR to version 115.30 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 139 Thunderbird versions prior to 139 **Description** The issue is related to memory safety bugs that have been identified in Firefox and Thunderbird. These bugs have shown evidence of memory corruption, and it is presumed that with sufficient effort, some of these bugs could be exploited to run arbitrary code. **Recommendations** For Firefox versions prior to 139, update to version 139 or later to resolve the issue. For Thunderbird versions prior to 139, update to version 139 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 135 Firefox ESR versions prior to 115.20 Firefox ESR versions prior to 128.7 Thunderbird versions prior to 128.7 Thunderbird versions prior to 135 **Description** Memory safety bugs have been detected in Firefox and Thunderbird, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could have been exploited to run arbitrary code. **Recommendations** For Firefox versions prior to 135, update to version 135 or later. For Firefox ESR versions prior to 115.20, update to version 115.20 or later. For Firefox ESR versions prior to 128.7, update to version 128.7 or later. For Thunderbird versions prior to 128.7, update to version 128.7 or later. For Thunderbird versions prior to 135, update to version 135 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 134 Firefox ESR versions prior to 128.6 Thunderbird versions prior to 134 Thunderbird ESR versions prior to 128.6 **Description** The issue is related to memory safety bugs that have been identified in Firefox and Thunderbird. These bugs have shown evidence of memory corruption, and it is presumed that with sufficient effort, some of these could be exploited to run arbitrary code. **Recommendations** For Firefox versions prior to 134, update to version 134 or later. For Firefox ESR versions prior to 128.6, update to version 128.6 or later. For Thunderbird versions prior to 134, update to version 134 or later. For Thunderbird ESR versions prior to 128.6, update to version 128.6 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 131 Firefox ESR versions prior to 128.3 Firefox ESR versions prior to 115.16 Thunderbird versions prior to 128.3 Thunderbird versions prior to 131 **Description** The issue is related to memory safety bugs that can lead to memory corruption, potentially allowing a remote attacker to bypass security restrictions and execute arbitrary code. Some of these bugs have shown evidence of memory corruption, and it is presumed that with sufficient effort, they could be exploited to run arbitrary code. **Recommendations** For Firefox versions prior to 131, update to version 131 or later. For Firefox ESR versions prior to 128.3, update to version 128.3 or later. For Firefox ESR versions prior to 115.16, update to version 115.16 or later. For Thunderbird versions prior to 128.3, update to version 128.3 or later. For Thunderbird versions prior to 131, update to version 131 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions 130 and earlier Firefox ESR versions 128.2 and earlier Thunderbird versions 128.2 and earlier **Description** The issue is related to memory safety bugs that could potentially be exploited to run arbitrary code, with evidence of memory corruption found in some cases. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information. The vulnerability is associated with a buffer overflow when cloning objects, which can be exploited by a remote attacker. **Recommendations** For Firefox version 130 and earlier, update to version 131 or later. For Firefox ESR version 128.2 and earlier, update to version 128.3 or later. For Thunderbird version 128.2 and earlier, update to version 128.3 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 122 Firefox ESR versions prior to 115.7 Thunderbird versions prior to 115.7 **Description** The issue is related to memory safety bugs, which can lead to memory corruption. It is presumed that with sufficient effort, these bugs could be exploited to run arbitrary code. The vulnerability can be exploited by a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 122, update to version 122 or later. For Firefox ESR versions prior to 115.7, update to version 115.7 or later. For Thunderbird versions prior to 115.7, update to version 115.7 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 115.6 Thunderbird versions prior to 115.6 Firefox versions prior to 121 **Description** The `VideoBridge` component allowed any content process to use textures produced by remote decoders, which could be abused to escape the sandbox. This issue is related to errors in security settings and could be exploited by a remote attacker to bypass the sandbox protection mechanism. **Recommendations** For Firefox ESR versions prior to 115.6, update to version 115.6 or later. For Thunderbird versions prior to 115.6, update to version 115.6 or later. For Firefox versions prior to 121, update to version 121 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 113 Firefox ESR versions prior to 102.11 Thunderbird versions prior to 102.11 **Description** The issue is caused by memory safety bugs, including buffer overflow, which can lead to memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code. An attacker could exploit this issue by tricking a user into opening a specially crafted website, potentially leading to the execution of arbitrary code in the target system. **Recommendations** For Firefox versions prior to 113, update to version 113 or later. For Firefox ESR versions prior to 102.11, update to version 102.11 or later. For Thunderbird versions prior to 102.11, update to version 102.11 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 112 Focus for Android versions prior to 112 Firefox ESR versions prior to 102.10 Firefox for Android versions prior to 112 Thunderbird versions prior to 102.10 **Description** The issue is related to memory safety bugs and buffer overflow errors when processing HTML content, which can lead to memory corruption. With sufficient effort, these bugs could potentially be exploited to run arbitrary code. An attacker could create a specially crafted website, trick a victim into opening it, and cause memory damage, potentially executing arbitrary code on the target system. **Recommendations** For Firefox versions prior to 112, update to version 112 or later. For Focus for Android versions prior to 112, update to version 112 or later. For Firefox ESR versions prior to 102.10, update to version 102.10 or later. For Firefox for Android versions prior to 112, update to version 112 or later. For Thunderbird versions prior to 102.10, update to version 102.10 or later.