Edgar Chen

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 147 Firefox ESR versions prior to 140.7 **Description** A spoofing issue exists in the DOM Copy, Paste, and Drag & Drop components. The issue involves potential manipulation within these components, allowing for spoofing attacks. **Recommendations** Update Firefox to version 147 or later. Update Firefox ESR to version 140.7 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 147 Thunderbird versions prior to 147 Firefox ESR versions prior to 140.7 Thunderbird ESR versions prior to 140.7 **Description** The software contains memory safety bugs that could potentially lead to arbitrary code execution. Some of these bugs exhibited evidence of memory corruption. **Recommendations** Update Firefox to version 147 or later. Update Thunderbird to version 147 or later. Update Firefox ESR to version 140.7 or later. Update Thunderbird ESR to version 140.7 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 119 Firefox ESR versions prior to 115.4 Thunderbird versions prior to 115.4.1 **Description** The issue is related to errors in presenting information to the user interface, resulting in the hiding of full-screen notifications. This could lead to user confusion and possible spoofing attacks. A website could obscure the full-screen notification by using the file open dialog. This issue only affects macOS operating systems, with other operating systems being unaffected. **Recommendations** For Firefox versions prior to 119, update to version 119 or later to resolve the issue. For Firefox ESR versions prior to 115.4, update to version 115.4 or later to resolve the issue. For Thunderbird versions prior to 115.4.1, update to version 115.4.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the file open dialog in affected versions to minimize the risk of exploitation.