Mozilla Fuzzing Team

**Name of the Vulnerable Software and Affected Versions** Thunderbird version 150 Firefox version 150 **Description** Memory safety bugs involving memory corruption may allow an attacker to execute arbitrary code. **Recommendations** Update Thunderbird to version 151. Update Firefox to version 151.

**Name of the Vulnerable Software and Affected Versions** Firefox version 150.0.1 **Description** Memory safety bugs exist that exhibit evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code. **Recommendations** Update to version 150.0.2.

**Name of the Vulnerable Software and Affected Versions** Firefox version 150.0.0 Firefox ESR version 140.10.0 Firefox ESR version 115.35.0 **Description** Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code. **Recommendations** Update Firefox 150.0.0 to version 150.0.1. Update Firefox ESR 140.10.0 to version 140.10.1. Update Firefox ESR 115.35.0 to version 115.35.1.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR version 140.10.0 Firefox version 150.0.0 **Description** Memory safety bugs exist that exhibit evidence of memory corruption, which could potentially be exploited to execute arbitrary code. **Recommendations** Update Firefox ESR to version 140.10.1. Update Firefox to version 150.0.1.

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 149.0.2 Thunderbird versions prior to 149.0.2 Description Memory safety bugs exist in Firefox 149.0.1 and Thunderbird 149.0.1. These bugs demonstrate evidence of memory corruption, and it is presumed that, with sufficient effort, they could be exploited to execute arbitrary code. The vulnerability involves writing beyond buffer boundaries. Recommendations Update Firefox to version 149.0.2 or later. Update Thunderbird to version 149.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 149 Thunderbird versions prior to 149 **Description** Memory safety issues exist in Firefox 148 and Thunderbird 148. These bugs demonstrate evidence of memory corruption, and it is presumed that, with sufficient effort, they could potentially be exploited to execute arbitrary code. **Recommendations** Update Firefox to version 149 or later. Update Thunderbird to version 149 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 147 Thunderbird versions prior to 147 **Description** The software contains memory safety bugs that could potentially lead to arbitrary code execution. Some of these bugs demonstrate evidence of memory corruption. **Recommendations** Update Firefox to version 147 or later. Update Thunderbird to version 147 or later.