Multiple Vulnerabilities in Mozilla Products Could Allow for Arbitrary Code Execution

Multiple vulnerabilities affecting Mozilla products were disclosed (several CVEs). The most severe issues are memory-safety bugs and sandbox-escape flaws (including use-after-free and invalid pointer/undefined behavior) that Mozilla indicates could lead to arbitrary code execution; these could be exploited via drive-by compromise. The advisory also lists several lower-severity flaws (same-origin bypass, integer overflow, information disclosure, spoofing, mitigation bypass) across various components and platforms; successful exploitation could allow installation of programs, data access/modification, or creation of accounts depending on user privileges.