Volerion logoVolerion
Volerion logoVolerion

Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Potential Arbitrary Code Execution

Vulnerability

A vulnerability has been identified in Mozilla Firefox and Thunderbird versions 146 and ESR 140.6, involving memory safety issues that could lead to memory corruption. With sufficient effort, these issues might have been exploited to execute arbitrary code. This vulnerability affects Firefox versions prior to 147 and Firefox ESR versions prior to 140.7.

Impact

Exploitation of this vulnerability could have allowed for arbitrary code execution.

Remediation

Users can upgrade to Firefox 147, Thunderbird 147, Firefox ESR 140.7, or Thunderbird ESR 140.7 to address this vulnerability.

Added: Jan 13, 2026, 2:23 PM
Updated: Jan 13, 2026, 3:27 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
4.4
remediation
7.7
relevance
2.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.