Mozilla Firefox < 153.0

The version of Firefox installed on the remote Windows host is prior to 153.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-68 advisory. - Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory...

Mozilla Firefox < 153.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 153.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-68 advisory. - Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memo...

PT-2026-61869

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description The Graphics component contains incorrect boundary...

PT-2026-61864

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A use-after-free issue exists in the Disability Access AP...

PT-2026-61866

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description An information disclosure issue exists within the Graphic...

PT-2026-61871

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description Incorrect boundary conditions exist within the Audio/Vide...

PT-2026-61881

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description An integer overflow exists in the JavaScript: WebAssembly component. An integer overflow occu...

PT-2026-61908

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird versions prior to 140.13 Description Privilege escalation exists in WebExtensions, allowing an attacker to gain higher levels of...

PT-2026-61870

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Firefox ESR versions prior to 115.38 Firefox ESR versions prior to 140.13 Thunderbird versions prior to 153 Thunderbird version prior to 140.13 Description A site isolation issue exists within the Graphics:...

PT-2026-61897

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description Information disclosure occurs due to uninitialized memory within the Graphics: WebGPU component. WebGPU is a modern API that provides high-performance graphics and...

PT-2026-61909

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 153 Description A clickjacking issue exists in the WebExtensions component. Clickjacking is a technique where an attacker uses multiple transparent or semi-transparent layers to trick a user into clicking ...

PT-2026-61884

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A privilege escalation issue exists within the DOM: Content Processes component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...

PT-2026-61878

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A privilege escalation issue exists within the DOM Navigation component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...

PT-2026-61882

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A mitigation bypass exists within the DOM: Networking component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...

PT-2026-61892

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A mitigation bypass exists within the Networking component. Recommendations Update Firefox to version 153. Update Thunderbird to version 153...

PT-2026-61911

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A site isolation issue exists within the DOM Navigation component. Site isolation is a security mechanism that ensures web pages from different sites are processed in...

PT-2026-61912

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description An information disclosure issue exists within the DOM Security component...

PT-2026-61879

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 153 Thunderbird versions prior to 153 Description A sandbox escape is possible due to an invalid pointer within the Disability Access APIs component. A sandbox is a security mechanism used to isolate running...

Security Vulnerabilities fixed in Firefox ESR 115.38 — Mozilla

We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw. Memory safety bugs present in Firefox ESR 115.37, Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of memory corruption and we presume that with enough...

Mozilla Firefox ESR < 140.13

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 140.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2026-70 advisory. - Memory safety bugs present in Firefox ESR 140.12 and Firefox 152. Some of these bugs showed evidence of...