The Mozilla Fuzzing Team

Memory safety bugs present in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulne

Privilege escalation in the Enterprise Policies component

Information disclosure in the Form Autofill component

Same-origin policy bypass in the Graphics: ImageLib component

Same-origin policy bypass in the Audio/Video: Playback component

Incorrect boundary conditions in the Audio/Video: Playback component

Information disclosure in Firefox for Android and Firefox Focus for Android

Memory safety bugs fixed in Thunderbird ESR 140.13

Memory safety bugs fixed in Thunderbird 150.0.1

Sandbox escape due to incorrect boundary conditions in the WebRTC: Networking component