Mozilla has released security updates to address security vulnerabilities in several of its products. An attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution, elevation of privilege, spoofing, security restriction bypass and sensitive information disclosure on the targeted system. Security vulnerabilities fixed in Firefox 152, Firefox ESR 115.37, Firefox ESR 140.12, Firefox for iOS 152.0, Thunderbird 140.12, Thunderbird 152.

More information on vulnerabilities and updates is available in Mozilla security advisories:

• MFSA2026-56

• MFSA2026-57

• MFSA2026-58

• MFSA2026-59

• MFSA2026-60

• MFSA2026-61

Source: mozilla.org