Mozilla Firefox and Thunderbird Memory Safety Vulnerability Allowing Potential Arbitrary Code Execution

Vulnerability

A vulnerability has been identified in Mozilla Firefox and Thunderbird, specifically in versions prior to 149, Firefox ESR prior to 115.34, and Firefox ESR prior to 140.9. This vulnerability arises from memory safety issues that could lead to memory corruption. While there is no direct evidence of exploitation, it is presumed that with sufficient effort, these issues could have been leveraged to execute arbitrary code.

Impact

Exploitation of this vulnerability could lead to arbitrary code execution.

Remediation

Users can upgrade to Firefox 149, Firefox ESR 115.34, or Thunderbird 149 to address this vulnerability.

Added: Mar 24, 2026, 1:28 PM
Updated: Mar 24, 2026, 1:28 PM

Vulnerability Rating

Custom Algorithm
spread
8.4
impact
10.0
exploitability
3.8
remediation
7.7
relevance
4.6
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.