Nebula Security

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 **Description** A JIT miscompilation issue exists within the JavaScript: WebAssembly component. JIT (Just-In-Time) compilation is a method used by software to improve execution speed by compiling code during runtime rather than before execution. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 **Description** Incorrect boundary conditions exist within the JavaScript: WebAssembly component. **Recommendations** Update Firefox to version 153. Update Firefox ESR to version 140.13. Update Thunderbird to version 153. Update Thunderbird to version 140.13.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 151.0.3 **Description** A JIT miscompilation issue exists in the JavaScript Engine's JIT component, where JIT refers to Just-In-Time compilation, a method of improving program execution speed by compiling code during runtime. This flaw involves type confusion errors that can be exploited by a remote attacker to execute arbitrary code within the browser's renderer process. Real-world incidents indicate this issue has been used as the first stage in a full chain browser-to-kernel exploit to achieve root access on Android 17 devices via a single visit to a malicious webpage. **Recommendations** Update to version 151.0.3 or later.