Memory safety bugs present in Firefox 125, Firefox ESR 115.10, and Thunderbird 115.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-x11 | May 22, 2024 | May 14, 2024 |
| Amazon Linux Ami 2 | — | Upgrade firefoxUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbird | Jun 12, 2024 | May 14, 2024 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | May 17, 2024 | May 14, 2024 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | May 17, 2024 | May 14, 2024 |
| Mfsa2024 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 126.0 | May 15, 2024 | May 14, 2024 |
| Mfsa2024 22 | — | Upgrade to Mozilla Firefox ESR version 115.11Upgrade to the latest version of Mozilla Firefox | May 15, 2024 | May 14, 2024 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.11Upgrade to the latest version of Mozilla Thunderbird | May 15, 2024 | May 15, 2024 |
| Oracle_linux | — | Upgrade firefox-x11Upgrade firefoxUpgrade thunderbird | May 17, 2024 | May 14, 2024 |
| Redhat_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11No solution existsUpgrade thunderbird-debugsourceUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | May 17, 2024 | May 14, 2024 |
| Rocky_linux | — | Upgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird-debugsourceUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird | Jun 17, 2024 | May 14, 2024 |
| Suse | — | Upgrade MozillaFirefox-translations-commonUpgrade MozillaFirefoxUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbird-translations-other | May 20, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefox | May 28, 2024 | May 14, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub