Yaqoub Aldurayhim

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 155 Mozilla Firefox ESR versions prior to 153.2 **Description** A use-after-free issue exists within the DOM: Core and HTML components. A use-after-free occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution. **Recommendations** Update Mozilla Firefox to version 155. Update Mozilla Firefox ESR to version 153.2.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird ESR versions prior to 153.2 **Description** A use-after-free issue exists in the Graphics: WebGPU component, which could lead to privilege escalation. Use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed. **Recommendations** Update Firefox to version 155. Update Firefox ESR to version 153.2. Update Thunderbird to version 155. Update Thunderbird ESR to version 153.2.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2 **Description** A use-after-free issue exists in the DOM: Security component, which can lead to a sandbox escape. A use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed. **Recommendations** Update Firefox to version 155. Update Firefox ESR to version 115.40. Update Firefox ESR to version 140.15. Update Firefox ESR to version 153.2. Update Thunderbird to version 155. Update Thunderbird to version 140.15. Update Thunderbird to version 153.2.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 155 Firefox ESR versions prior to 115.40 Firefox ESR versions prior to 140.15 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 140.15 Thunderbird versions prior to 153.2 **Description** A use-after-free issue exists in the DOM: Navigation component, which can lead to a sandbox escape. A use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed. **Recommendations** Update Firefox to version 155. Update Firefox ESR to version 115.40. Update Firefox ESR to version 140.15. Update Firefox ESR to version 153.2. Update Thunderbird to version 155. Update Thunderbird to version 140.15. Update Thunderbird to version 153.2.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 155 Firefox ESR versions prior to 153.2 Thunderbird versions prior to 155 Thunderbird versions prior to 153.2 **Description** A site isolation issue exists within the DOM Navigation component. Site isolation is a security mechanism that ensures web pages from different sites are processed in separate processes to prevent data leakage. **Recommendations** Update Firefox to version 155. Update Firefox ESR to version 153.2. Update Thunderbird to version 155. Update Thunderbird to version 153.2.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 115.39 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 **Description** An information disclosure issue exists within the Graphics component. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 115.39. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 140.14. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 **Description** A site isolation issue exists within the Networking: Cookies component. Site isolation is a security mechanism that ensures web pages from different sites are processed in separate processes to prevent one site from accessing data from another. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 140.14. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 154 Firefox ESR versions prior to 115.39 Firefox ESR versions prior to 140.14 Firefox ESR versions prior to 153.1 Thunderbird versions prior to 154 Thunderbird versions prior to 140.14 Thunderbird versions prior to 153.1 **Description** Privilege escalation exists within the DOM: Networking component. **Recommendations** Update Firefox to version 154. Update Firefox ESR to version 115.39. Update Firefox ESR to version 140.14. Update Firefox ESR to version 153.1. Update Thunderbird to version 154. Update Thunderbird to version 140.14. Update Thunderbird to version 153.1.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Thunderbird versions prior to 153 **Description** A site isolation issue exists within the DOM Navigation component. Site isolation is a security mechanism that ensures web pages from different sites are processed in separate processes to prevent data leakage. **Recommendations** Update Firefox to version 153. Update Thunderbird to version 153.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 **Description** A use-after-free issue exists in the DOM: Navigation component, which can lead to a sandbox escape. A use-after-free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 115.38 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Thunderbird versions prior to 153 **Description** A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the background, separate from a web page, enabling features such as push notifications and offline access. **Recommendations** Update Firefox to version 153. Update Thunderbird to version 153.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Thunderbird versions prior to 153 **Description** A sandbox escape exists within the DOM networking component. A sandbox is a security mechanism used to isolate running applications from the rest of the system to prevent malicious code from accessing sensitive data or resources. **Recommendations** Update Firefox to version 153. Update Thunderbird to version 153.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 **Description** An information disclosure issue exists within the Networking: WebSockets component. WebSockets is a protocol providing full-duplex communication channels over a single TCP connection. **Recommendations** Update Firefox to version 153 or later. Update Firefox ESR to version 140.13 or later. Update Thunderbird to version 153 or later. Update Thunderbird to version 140.13 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 **Description** A same-origin policy bypass exists in the Networking: Cookies component. The same-origin policy is a critical security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin. **Recommendations** Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Thunderbird to version 152. Update Thunderbird to version 140.12.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 **Description** An information disclosure and sandbox escape issue exists within the Security: Process Sandboxing component. A sandbox escape occurs when a process bypasses the restricted environment designed to isolate it from the rest of the system. **Recommendations** Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Thunderbird to version 152. Update Thunderbird to version 140.12.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 **Description** A memory safety bug exists in the software, which could lead to unexpected behavior or crashes when handling memory operations. **Recommendations** Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Thunderbird to version 152. Update Thunderbird to version 140.12.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 **Description** A sandbox escape exists within the Security: Process Sandboxing component. A sandbox is a security mechanism for separating running programs, usually in an effort to mitigate the impact of a vulnerability by restricting the program's access to the rest of the system. **Recommendations** Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Thunderbird to version 152. Update Thunderbird to version 140.12.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 152 Firefox ESR versions prior to 140.12 Firefox ESR versions prior to 115.37 Thunderbird versions prior to 152 Thunderbird versions prior to 140.12 **Description** A sandbox escape exists within the DOM Navigation component. A sandbox is a security mechanism for separating running programs, ensuring that code in a restricted environment cannot access sensitive system resources. **Recommendations** Update Firefox to version 152. Update Firefox ESR to version 140.12. Update Firefox ESR to version 115.37. Update Thunderbird to version 152. Update Thunderbird to version 140.12.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 151 Firefox ESR versions prior to 140.11 Thunderbird versions prior to 151 Thunderbird versions prior to 140.11 **Description** An integer overflow exists in the Networking: JAR component. An integer overflow occurs when an arithmetic operation attempts to create a numeric value that is too large to be represented within the available storage area. **Recommendations** Update Firefox to version 151. Update Firefox ESR to version 140.11. Update Thunderbird to version 151. Update Thunderbird to version 140.11.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 151 Firefox ESR versions prior to 140.11 Thunderbird versions prior to 151 Thunderbird versions prior to 140.11 **Description** An issue in the Security: Process Sandboxing component allows for information disclosure and sandbox escape. A sandbox is a security mechanism for separating running programs, ensuring that code in one process cannot access memory or resources of another. **Recommendations** Update to version 151 Update to version 140.11 Update to version 151 Update to version 140.11