Total vulnerabilities in the database
On Windows, a compromised content process could use bad StreamData sent over AudioIPC to trigger a use-after-free in the Browser process. This could have led to a sandbox escape. This vulnerability affects Firefox < 136, Firefox ESR < 115.21, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.
| Software | From | Fixed in |
|---|---|---|
| mozilla / firefox | - | 136.0 |
| mozilla / firefox | - | 115.21.0 |
| mozilla / firefox | 116.0 | 128.8.0 |
| mozilla / thunderbird | - | 128.8 |
| mozilla / thunderbird | 1.28.8.x | 136.0 |