Mozilla Thunderbird any version

Memory safety bugs fixed in Firefox 128 and Thunderbird 128

Privilege escalation in the Shell Integration component

Privilege escalation in the Networking: Cookies component

Privilege escalation in the WebDriver BiDi component

Privilege escalation in the WebRTC: Audio/Video component

Use-after-free in the JavaScript: GC component

Privilege escalation due to use-after-free in the Graphics: WebGPU component

Privilege escalation in the Enterprise Policies component

Privilege escalation in the Debugger component

Privilege escalation in the Networking component

Privilege escalation in the DOM: Notifications component

Privilege escalation in the DOM: Workers component

Privilege escalation in the Application Update component

Privilege escalation in the Downloads API component

Privilege escalation in the Security component

Privilege escalation in the Request Handling component

Memory safety bugs fixed in Firefox ESR 115.26, Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation in the Netmonitor component

Privilege escalation in the Netmonitor component

Privilege escalation in the Application Update component

AudioIPC StreamData could trigger a use-after-free in the Browser process

Privilege escalation in the Graphics: WebRender component

Certificate length was not properly checked

Use-after-free in the Networking: HTTP component

Memory safety bugs fixed in Firefox ESR 128.13, Thunderbird ESR 128.13, Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Memory safety bugs fixed in Firefox ESR 115.29, Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

Privilege escalation due to invalid pointer in the Graphics component

Memory safety bugs fixed in Firefox ESR 140.3, Thunderbird ESR 140.3, Firefox 143 and Thunderbird 143

Memory safety bugs fixed in Firefox ESR 140.4, Thunderbird ESR 140.4, Firefox 144 and Thunderbird 144

Memory safety bugs fixed in Firefox ESR 140.1, Thunderbird ESR 140.1, Firefox 141 and Thunderbird 141

Privilege escalation in the DOM: Navigation component

Privilege escalation in the DOM: Content Processes component

Use-after-free in the WebRTC: Audio/Video component

Privilege escalation in the DOM: Content Processes component

Privilege escalation in the DOM: Workers component

Privilege escalation in the DOM: Navigation component

Privilege escalation in WebExtensions

Privilege escalation in the Data Loss Prevention component

A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

Integer Overflow in RecordedSourceSurfaceCreation