Mozilla Firefox any version

Privilege escalation in the Security component

Privilege escalation in the DOM: Notifications component

Privilege escalation in the Enterprise Policies component

Privilege escalation in the Debugger component

Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation in the Netmonitor component

Privilege escalation in the Netmonitor component

Privilege escalation in the Application Update component

AudioIPC StreamData could trigger a use-after-free in the Browser process

Privilege escalation in the Graphics: WebRender component

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

Certificate length was not properly checked

Use-after-free in the Networking: HTTP component

Memory safety bugs fixed in Firefox 148.0.2

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.

When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97.

Firefox Android missed activation delay to prevent tapjacking

Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation due to invalid pointer in the Graphics component

Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Content Processes component

Use-after-free in the Audio/Video component

Use-after-free in the WebRTC: Audio/Video component

Use-after-free in the WebRTC: Audio/Video component

Privilege escalation in the DOM: Content Processes component

Privilege escalation in the DOM: Workers component

Use-after-free in the Layout: Scrolling and Overflow component

Privilege escalation in the DOM: Navigation component

Memory safety bugs fixed in Firefox 146.0.1

Privilege escalation in WebExtensions

Privilege escalation in the Data Loss Prevention component

No warning when opening executable terminal files on macOS

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.

Integer Overflow in RecordedSourceSurfaceCreation

By manipulating the text in an `&lt;input&gt;` tag, an attacker could have caused corrupt memory leading to a potentially exploitable crash. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.