Jan Varga

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 115.6 Firefox versions prior to 121 **Description** The issue is related to the `EncryptingOutputStream` being susceptible to exposing uninitialized data. This could be abused to write data to a local disk, potentially affecting private browsing mode. The vulnerability may allow a remote attacker to disclose protected information. **Recommendations** For Firefox ESR versions prior to 115.6, update to version 115.6 or later. For Firefox versions prior to 121, update to version 121 or later. As a temporary workaround, consider restricting access to sensitive data when using private browsing mode until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 67 Firefox ESR versions prior to 60.7 Thunderbird versions prior to 60.7 **Description** The issue is related to memory safety bugs, which can lead to memory corruption. It is presumed that with sufficient effort, some of these bugs could be exploited to run arbitrary code. The vulnerability is also described as a buffer data boundary operation issue, which can allow a remote attacker to cause a denial of service and disrupt data integrity. **Recommendations** For Firefox versions prior to 67, update to version 67 or later. For Firefox ESR versions prior to 60.7, update to version 60.7 or later. For Thunderbird versions prior to 60.7, update to version 60.7 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 67 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. It is also described as a buffer overflow vulnerability in memory, allowing a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For versions prior to 67, update to version 67 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and implementing additional security measures to minimize the risk of exploitation.