Vlad

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (Chromium-based) (affected versions not specified) **Description** The issue is related to a security feature bypass vulnerability in Microsoft Edge. It is associated with inadequate access control, which can be exploited by a remote attacker to bypass existing security restrictions. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 25.0 Firefox ESR versions 24.x prior to 24.1 Thunderbird versions prior to 24.1 SeaMonkey versions prior to 2.22 **Description** The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors. **Recommendations** For Mozilla Firefox versions prior to 25.0, update to version 25.0 or later. For Firefox ESR versions 24.x prior to 24.1, update to version 24.1 or later. For Thunderbird versions prior to 24.1, update to version 24.1 or later. For SeaMonkey versions prior to 2.22, update to version 2.22 or later.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 24.0 on Android **Description** The issue is related to an untrusted search path vulnerability in the GL tracing functionality. This allows attackers to execute arbitrary code via a Trojan horse .so file in a world-writable directory. **Recommendations** For versions prior to 24.0 on Android, update to version 24.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 3.6.7 Thunderbird versions prior to 3.1.1 **Description** The issue is related to the improper implementation of read restrictions for CANVAS elements. This allows remote attackers to obtain sensitive cross-origin information via vectors involving reference retention and node deletion. **Recommendations** For Mozilla Firefox versions prior to 3.6.7, update to version 3.6.7 or later to resolve the issue. For Thunderbird versions prior to 3.1.1, update to version 3.1.1 or later to resolve the issue.