Dan Minor

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 115.9 Thunderbird versions prior to 115.9 **Description** The issue is related to incorrect clearing or release of resources, potentially allowing a remote attacker to impact the confidentiality, availability, and integrity of protected information. The behavior for out-of-memory conditions was changed to crash instead of attempting to continue, in order to harden against exploitation. **Recommendations** For Firefox ESR versions prior to 115.9, update to version 115.9 or later. For Thunderbird versions prior to 115.9, update to version 115.9 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 76 **Description** Memory safety bugs were reported in Firefox, which showed evidence of memory corruption. It is presumed that with enough effort, some of these bugs could have been exploited to run arbitrary code. **Recommendations** For versions prior to 76, update to version 76 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 50 **Description** Memory safety bugs were reported, showing evidence of memory corruption. It is presumed that with enough effort, some of these bugs could be exploited to run arbitrary code. **Recommendations** For versions prior to 50, update to version 50 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 49.0 Mozilla Firefox ESR 45.x versions prior to 45.4 Thunderbird versions prior to 45.4 **Description** The issue affects the browser engine, allowing remote attackers to cause a denial of service, which may result in memory corruption and application crash, or possibly execute arbitrary code via unknown vectors. **Recommendations** For Mozilla Firefox versions prior to 49.0, update to version 49.0 or later. For Mozilla Firefox ESR 45.x versions prior to 45.4, update to version 45.4 or later. For Thunderbird versions prior to 45.4, update to version 45.4 or later.