Amy Burnett

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 **Description** A use-after-free issue exists in the JavaScript: WebAssembly component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Update Firefox to version 154 or later. Update Firefox ESR to version 140.14 or later. Update Firefox ESR to version 153.1 or later. Update Thunderbird to version 154 or later. Update Thunderbird to version 140.14 or later. Update Thunderbird to version 153.1 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 **Description** A race condition exists in the JavaScript Engine component. A race condition is a situation where the system's substantive behavior is dependent on the sequence or timing of other uncontrollable events. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 **Description** A use-after-free issue exists within the DOM: Core & HTML component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Update Firefox to version 154 or later. Update Firefox ESR to version 140.14 or later. Update Firefox ESR to version 153.1 or later. Update Thunderbird to version 154 or later. Update Thunderbird to version 140.14 or later. Update Thunderbird to version 153.1 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 **Description** A mitigation bypass exists within the JavaScript: GC (Garbage Collector) component. The Garbage Collector is a memory management system that automatically reclaims memory used by objects that are no longer reachable by the program. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 **Description** A use-after-free issue exists in the JavaScript: GC component. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 **Description** An integer overflow exists in the JavaScript: WebAssembly component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is too large to be stored in the allotted memory space. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 **Description** A JIT miscompilation issue exists within the JIT component of the JavaScript Engine. JIT (Just-In-Time) compilation is a method used by the engine to improve performance by compiling code during execution rather than before. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 115.38 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Thunderbird versions prior to 153 **Description** A JIT miscompilation issue exists within the JIT component of the JavaScript Engine. JIT (Just-In-Time) compilation is a method used by the engine to improve performance by compiling code during execution rather than before. **Recommendations** Update Firefox to version 153. Update Thunderbird to version 153.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** An out-of-bounds write issue exists where processing maliciously crafted web content may lead to an unexpected Safari crash. This occurs due to insufficient input validation, where an out-of-bounds write is a condition where a program writes data past the end of the intended buffer, potentially corrupting memory. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Processing maliciously crafted web content may lead to an unexpected Safari crash due to improper memory handling. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** A memory corruption issue exists within WebKit. Processing maliciously crafted web content can lead to an unexpected process crash or allow attackers to achieve arbitrary code execution through malicious websites. Following a compromise, threat actors may escalate privileges and move laterally across networks. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Safari versions prior to 26.5.2 iOS versions prior to 26.5.2 iPadOS versions prior to 26.5.2 macOS Tahoe versions prior to 26.5.2 **Description** Processing maliciously crafted web content may lead to an unexpected process crash due to improper memory handling. **Recommendations** Update Safari to version 26.5.2. Update iOS to version 26.5.2. Update iPadOS to version 26.5.2. Update macOS Tahoe to version 26.5.2.

**Name of the Vulnerable Software and Affected Versions** Firefox for Android versions prior to 92 **Description** The issue is related to the `intent://` protocol, which could be exploited to cause crashes and UI spoofs. This can be achieved through specially crafted links. The estimated number of potentially affected devices is not provided. **Recommendations** For Firefox for Android versions prior to 92, update to version 92 or later to resolve the issue. As a temporary workaround, consider restricting the use of the `intent://` protocol until a patch is available.

**Name of the Vulnerable Software and Affected Versions** macOS versions prior to 10.13.5 **Description** The issue involves the "Windows Server" component and allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app. This is due to a buffer overflow in memory. The exploitation of this issue may enable an attacker to execute arbitrary code with system privileges or cause a denial of service using a specially crafted application. **Recommendations** For macOS versions prior to 10.13.5, update to version 10.13.5 or later to resolve the issue. As a temporary workaround, consider restricting the use of the "Windows Server" component to minimize the risk of exploitation.