Satoki Tsuji

Privilege escalation in the Networking: Cookies component

Information disclosure in the Privacy component in Firefox for Android

Use-after-free in the DOM: Bindings (WebIDL) component

Mitigation bypass in the Networking: Cookies component

Spoofing issue in the Popup Blocker component

Devtools' preview ignored CSP headers

Privilege escalation in the Netmonitor component

By monitoring the time certain operations take, an attacker could have guessed which external protocol handlers were functional on a user's system. This vulnerability affects Firefox < 127, Firefox ESR < 115.12, and Thunderbird < 115.12.

By checking the result of calls to `window.open` with specifically set protocol handlers, an attacker could determine if the application which implements that protocol handler is installed. This vulnerability affects Firefox < 131, Firefox ESR < 128.3, Th