Multiple vulnerabilities in Mozilla products, including remote code execution, privilege escalation, and information disclosure, can be exploited by a remote attacker. Affected versions are Firefox prior to 150, Firefox ESR prior to 115.35 and 140.10, and Thunderbird prior to 140.10 and 150. The vendor has released fixes in Firefox 150, Firefox ESR 115.35, Firefox ESR 140.10, Thunderbird 140.10, and Thunderbird 150.
Multiple vulnerabilities were identified in Mozilla Products. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution, security restriction bypass, spoofing and sensitive information disclosure on the targeted system. Impact Denial of Service Remote Code Execution Information Disclosure Security Restriction Bypass Elevation of Privilege Spoofing System / Technologies affected Versions prior to: Firefox 150 Firefox ESR 115.35 Firefox ESR 140.10 Thunderbird 140.10 Thunderbird 150 Solutions Before installation of the software, please visit the vendor web-site for more details. Apply fixes issued by the vendor: Firefox 150 Firefox ESR 115.35 Firefox ESR 140.10 Thunderbird 140.10 Thunderbird 150