6 source-linked records in the current knowledge graph.
Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution · 1 IOCMozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionMozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution