Mozilla -- Memory safety bugs

https://www.mozilla.org/en-US/security/advisories/mfsa2026-68/CVE-2026-16411 reports Memory safety bugs present in Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code...

Mozilla Firefox ESR < 115.38

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.38. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-69 advisory. - We are aware that exploit code for this is public however we are not aware of any attacks in the wild...

PT-2026-61872

Name of the Vulnerable Software and Affected Versions Firefox ESR version 115.37 Firefox ESR version 140.12 Firefox version 152 Thunderbird ESR version 140.12 Thunderbird version 152 Description Memory safety bugs were identified that showed evidence of memory corruption. These issues could...

PT-2026-61863

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A use-after-free issue exists in the DOM: Navigation...

PT-2026-61899

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A site isolation issue exists within the Networking component. Recommendations Update Firefox...

PT-2026-61887

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A site isolation issue exists within the Networking: HTTP component. Recommendations Update...

PT-2026-61902

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A mitigation bypass exists within the Enterprise Policies component. Recommendations Update...

PT-2026-61917

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description An information disclosure issue exists within the Networking: WebSockets component. WebSocket...

PT-2026-61862

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description Incorrect boundary conditions exist within the Audio/Vide...

PT-2026-61880

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description Incorrect boundary conditions exist within the JavaScript: WebAssembly component...

PT-2026-61865

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description An invalid pointer exists within the Bindings WebIDL...

PT-2026-61889

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A mitigation bypass exists within the PDF Viewer component. Recommendations Update Firefox to...

PT-2026-61861

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A same-origin policy bypass exists in the DOM Navigation...

PT-2026-61868

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A use-after-free issue exists in the Disability Access AP...

PT-2026-61891

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description A privilege escalation issue exists within the DOM: Content Processes component...

PT-2026-61867

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A JIT miscompilation issue exists within the JIT componen...

PT-2026-61905

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description Incorrect boundary conditions exist within the Graphics: WebGPU component. WebGPU is a modern API that allows web applications to access the GPU for hardware-accelerat...

PT-2026-61885

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 153 Description An information disclosure issue exists within the Privacy component, which could allow sensitive data to be exposed. Recommendations Update to version 153...

PT-2026-61894

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A mitigation bypass exists within the DOM: Service Workers component. Service Workers are scripts that the browser runs in the background, separate from a web page,...

PT-2026-61876

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description Incorrect boundary conditions exist within the Audio/Video: Playback component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...