Mozilla has released security updates to address security vulnerabilities in several of its products. An attacker could exploit some of these vulnerabilities to trigger spoofing, security restriction bypass, remote code execution and sensitive information disclosure on the targeted system. Security vulnerabilities fixed in Firefox ESR 115.32, Firefox ESR 140.7, Firefox 147, Thunderbird ESR 140.7, Thunderbird 147.

More information on vulnerabilities and updates is available in Mozilla security advisories:

MFSA 2026-01

MFSA 2026-02

MFSA 2026-03

MFSA 2026-04

MFSA 2026-05

Source: mozilla.org