Mozilla Firefox
cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*
- 150.0.0
A critical memory safety vulnerability has been identified in multiple versions of Mozilla Firefox and Thunderbird. This issue is present in Firefox ESR 115.35.0, Firefox ESR 140.10.0, Thunderbird ESR 140.10.0, Firefox 150.0.0, and Thunderbird 150.0.0. Some of these memory safety bugs showed signs of memory corruption, and it is presumed that, with enough effort, they could have been exploited to execute arbitrary code.
Exploitation of this vulnerability could lead to arbitrary code execution.
Users can upgrade to Firefox 150.0.1, Firefox ESR 140.10.1, Thunderbird ESR 140.10.1, or Firefox ESR 115.35.1 to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.