Richard Belisle

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Thunderbird versions prior to 152 **Description** A memory safety bug exists in the software, which could lead to unexpected behavior or crashes when handling memory operations. **Recommendations** Update to version 152 for Firefox. Update to version 152 for Thunderbird.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150 Thunderbird versions prior to 150 **Description** A mitigation bypass exists in the Networking: Cookies component. **Recommendations** Update to version 150 for Firefox. Update to version 150 for Thunderbird.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150 Thunderbird versions prior to 150 **Description** An integer overflow in the Graphics: WebGPU component can lead to a denial-of-service. **Recommendations** Update Firefox to version 150. Update Thunderbird to version 150.

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A flaw exists in Google Chrome's handling of WebSockets due to insufficient validation of untrusted input. A remote attacker who has compromised the renderer process can bypass the same origin policy using a specially crafted HTML page. The security severity is rated as Low. Recommendations Update Google Chrome to version 147.0.7727.55 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 148 Firefox ESR versions prior to 115.33 Firefox ESR versions prior to 140.8 Thunderbird versions prior to 148 Thunderbird versions prior to 140.8 **Description** A privilege escalation issue exists in the Messaging System component. This allows for unauthorized access and potential control over the system. **Recommendations** Update Firefox to version 148 or later. Update Firefox ESR to version 115.33 or later. Update Firefox ESR to version 140.8 or later. Update Thunderbird to version 148 or later. Update Thunderbird to version 140.8 or later.