Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution

Multiple critical and moderate vulnerabilities were disclosed in Mozilla products (Firefox, Thunderbird, Focus, and mobile variants), including memory-corruption flaws, a Canvas2D same-origin bypass, XSS/Content-Disposition issues, and popup/spam/DoS problems; several CVEs could allow arbitrary code execution or account compromise if exploited, and the advisory lists affected versions and CVE identifiers but does not report active in-the-wild exploitation.