Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution

Multiple memory-safety and related vulnerabilities were disclosed in Mozilla products (Firefox, Firefox ESR, Thunderbird), including use-after-free, out-of-bounds read/write, IPC information leaks, and other flaws (CVE-2025-11708–CVE-2025-11721). The most severe issues could enable arbitrary code execution via drive-by compromise; users should apply the listed security updates (Firefox ESR 115.29 / 140.4, Firefox 144, Thunderbird 144, etc.) to mitigate risk.