Mozilla Firefox 115.0.1 download the new

Other operating systems are unaffected.* This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. *This bug only affects Firefox on Windows when run in non-standard configurations (such as using `runas`).

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. (Chromium security severity: High) Published: Septem12:15:10 PM -0400 Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 1.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Mozilla Firefox 115.0.1 download the new