Mozilla Firefox

The N-able PassPortal extension before 3.29.2 for Chrome inserts sensitive information into a log file.

A website configured to initiate a specially crafted WebTransport session could crash the Firefox process leading to a denial of service condition. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Thunderbird < 128.3, and Thunderbird < 131.

Information disclosure due to uninitialized memory in Firefox and Firefox Focus for Android

An attacker could have caused a use-after-free in the JavaScript engine to read memory in the JavaScript string section of the heap. This vulnerability affects Firefox < 127.

Incorrect boundary conditions in the JavaScript Engine: JIT component

Incorrect boundary conditions in the Audio/Video: GMP component

Uninitialized memory in the Audio/Video: Web Codecs component

Incorrect boundary conditions in the WebRTC component

Incorrect boundary conditions in the WebRTC component

Memory safety bugs fixed in Thunderbird ESR 140.10.1 and Thunderbird 150.0.1

Incorrect boundary conditions in the Libraries component in NSS

Incorrect boundary conditions in the Graphics: Canvas2D component

Information disclosure in the WebRTC component

Use-after-free in the DOM: Networking component

Information disclosure, mitigation bypass in the Settings UI component

Use-after-free in the DOM: Bindings (WebIDL) component

Incorrect boundary conditions in the JavaScript: WebAssembly component

Information disclosure in the Networking: HTTP component

Information disclosure in the Graphics: WebGPU component

Information disclosure due to side-channel in the Storage: Cache API component

Information disclosure in the Form Autofill component

Incorrect boundary conditions in the Audio/Video component

Incorrect boundary conditions in the Graphics component

Incorrect boundary conditions in the Graphics: Text component

Incorrect boundary conditions in the Graphics component

Incorrect boundary conditions, integer overflow in the Audio/Video component

Incorrect boundary conditions in the Libraries component in NSS

An attacker could write data to the user's clipboard, bypassing the user prompt, during a certain sequence of navigational events. This vulnerability affects Firefox < 129, Firefox ESR < 128.3, and Thunderbird < 128.3.

Information disclosure in the DOM: Security component

Information disclosure in the IP Protection component

Information disclosure in the Graphics: WebGPU component

Information disclosure in the IP Protection component

Internally found bugs fixed in Firefox 155 and Firefox ESR 153.2

Memory safety bugs fixed in Firefox 150 and Thunderbird 150

Information disclosure due to JIT miscompilation in the JavaScript Engine: JIT component

Spoofing issue in WebExtensions

Spoofing issue in the Web Speech component

Sandbox escape in Firefox and Firefox Focus for Android

An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This could allow them to access cross-origin PDF content. This access is limited to "same site" documents by the Site Isolation feature on desktop clients, but full cross-origin access is possible on Android versions. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Firefox ESR < 115.16, Thunderbird < 128.3, and Thunderbird < 131.

Spoofing issue in the Popup Blocker component