Tomoya Nakanishi

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 155 Thunderbird versions prior to 155 **Description** Privilege escalation exists in the WebDriver BiDi component. WebDriver BiDi is a protocol that allows for bidirectional communication between the browser and the automation tool. **Recommendations** Update Firefox to version 155. Update Thunderbird to version 155.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 **Description** An information disclosure issue exists within the WebRTC component, which is a framework that enables real-time communication (voice, video, and data) between browsers. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 **Description** A mitigation bypass exists within the Safe Browsing component. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 140.14. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Thunderbird versions prior to 154 **Description** Privilege escalation exists within the Application Update component. **Recommendations** Update Firefox to version 154. Update Thunderbird to version 154.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 **Description** Information disclosure occurs due to a side-channel in the Storage: Cache API component. A side-channel is a method of extracting information from a system by observing its physical or operational behavior rather than exploiting a direct software bug. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 153.1 **Description** A mitigation bypass exists within the Add-ons Manager component. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 **Description** An information disclosure issue exists within the Storage: IndexedDB component. IndexedDB is a low-level API for client-side storage of significant amounts of structured data. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 **Description** Incorrect boundary conditions exist within the Audio/Video: cubeb component. Boundary conditions are the limits or edges of a valid range of values for a variable or input. **Recommendations** Update Firefox to version 153. Update Firefox ESR to version 115.38. Update Firefox ESR to version 140.13. Update Thunderbird to version 153. Update Thunderbird to version 140.13.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 **Description** An information disclosure issue exists within the Framework component of DevTools. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Thunderbird versions prior to 153 **Description** An integer overflow occurs in the Libraries component of NSS due to incorrect boundary conditions. An integer overflow is a condition where an arithmetic operation attempts to create a numeric value that is outside of the range that can be represented with a given number of digits. **Recommendations** Update Firefox to version 153 or later. Update Thunderbird to version 153 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox version 151 Thunderbird version 151 **Description** Memory safety bugs exist that exhibit evidence of memory corruption. These issues could potentially be exploited to execute arbitrary code. **Recommendations** Update Firefox to version 152. Update Thunderbird to version 152.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 151 Thunderbird versions prior to 151 **Description** A privilege escalation issue exists within the Application Update component. **Recommendations** Update Firefox to version 151. Update Thunderbird to version 151.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150 Firefox ESR versions prior to 140.10 Thunderbird versions prior to 150 Thunderbird versions prior to 140.10 **Description** A mitigation bypass exists within the File Handling component. **Recommendations** Update Firefox to version 150. Update Firefox ESR to version 140.10. Update Thunderbird to version 150. Update Thunderbird to version 140.10.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150 Firefox ESR versions prior to 140.10 Thunderbird versions prior to 150 Thunderbird versions prior to 140.10 **Description** Privilege escalation exists in the Debugger component. **Recommendations** Update to version 150 Update to version 140.10 Update to version 150 Update to version 140.10