Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities were disclosed in Mozilla products (Firefox, Thunderbird and related components), including a high-severity memory-corruption issue that could enable arbitrary code execution and many additional flaws (tapjacking, XSS, spoofing, double-free, null dereferences, clipboard leakage, signature verification bypasses, etc.). Some issues are platform-specific (macOS or Windows), and successful exploitation could allow attackers to install programs, access or modify data, or escalate privileges; there is no explicit evidence of in-the-wild exploitation in the report.