Jesse Schwartzentruber

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 85 Firefox ESR versions prior to 78.7 Thunderbird versions prior to 78.7 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with enough effort. It is also described as a buffer overflow vulnerability in memory, allowing a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 85, update to version 85 or later. For Firefox ESR versions prior to 78.7, update to version 78.7 or later. For Thunderbird versions prior to 78.7, update to version 78.7 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 52.7.3 Firefox versions prior to 59.0.2 **Description** A use-after-free issue can occur in the compositor during certain graphics operations when a raw pointer is used instead of a reference counted one, resulting in a potentially exploitable crash. This issue may allow a remote attacker to execute arbitrary code. **Recommendations** For Firefox ESR versions prior to 52.7.3, update to version 52.7.3 or later. For Firefox versions prior to 59.0.2, update to version 59.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 57 **Description** The issue is related to a buffer data boundary operation overflow. It may allow a remote attacker to execute arbitrary code. Memory safety bugs were reported, showing evidence of memory corruption, which could potentially be exploited. **Recommendations** For versions prior to 57, update to version 57 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data and minimizing browser usage until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 54 Firefox ESR versions prior to 52.2 Thunderbird versions prior to 52.2 **Description** The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. The vulnerability is associated with a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. **Recommendations** For Firefox versions prior to 54, update to version 54 or later. For Firefox ESR versions prior to 52.2, update to version 52.2 or later. For Thunderbird versions prior to 52.2, update to version 52.2 or later.