Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution

Multiple security vulnerabilities have been disclosed in Mozilla products (Firefox, Thunderbird, Firefox ESR, and Firefox for Android), including several high-severity CVEs that could enable arbitrary code execution or privilege escalation. Additional lower-severity issues cover information leakage, unsafe parsing, CSRF, and usability-related flaws; successful exploitation could allow attackers to install programs, view/change/delete data, or create accounts depending on user privileges.