Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result

An attacker could have caused memory corruption and a potentially exploitable use-after-free of a pointer in a global object's debugger vector

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash

Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced