Mozilla Firefox

JIT miscompilation in the JavaScript Engine: JIT component

Memory safety bugs fixed in Firefox 151

Privilege escalation in the Remote Settings Client component

Privilege escalation in the DOM: Networking component

Privilege escalation in the DOM: Navigation component

Privilege escalation due to invalid pointer in the Graphics component

Memory safety bugs fixed in Firefox ESR 140.11 and Firefox 151

Memory safety bugs fixed in Firefox 128 and Thunderbird 128

Privilege escalation in the Shell Integration component

Privilege escalation in the Networking: Cookies component

Privilege escalation in the WebDriver BiDi component

Privilege escalation in the WebRTC: Audio/Video component

Use-after-free in the JavaScript: GC component

Privilege escalation due to use-after-free in the Graphics: WebGPU component

Privilege escalation in the IPC component

Privilege escalation in the Downloads API component

Privilege escalation in the Networking component

Privilege escalation in the Application Update component

Privilege escalation in the Debugger component

Privilege escalation in the DOM: Workers component

Privilege escalation in the Request Handling component

Privilege escalation in the Security component

Privilege escalation in the Enterprise Policies component

Privilege escalation in the DOM: Notifications component

Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation in the Netmonitor component

Privilege escalation in the Netmonitor component

Privilege escalation in the Application Update component

AudioIPC StreamData could trigger a use-after-free in the Browser process

Heap buffer overflow in the Audio/Video: Playback component in Firefox for Android

Privilege escalation in the Graphics: WebRender component

Certificate length was not properly checked

Use-after-free in the Networking: HTTP component

Memory safety bugs fixed in Firefox 148.0.2

When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow the user to bypass the certificate error. On Firefox for Android, the user was presented with the option to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.

When clicking on a tel: link, USSD codes, specified after a <code>\*</code> character, would be included in the phone number. On certain phones, or on certain carriers, if the number was dialed this could perform actions on a user's account, similar to a cross-site request forgery attack.<br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 97.

Firefox Android missed activation delay to prevent tapjacking

Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation due to invalid pointer in the Graphics component

Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144