| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 89.0 | 89.0 |
| firefox esr | < 78.11 | 78.11 |
| thunderbird | < 78.11 | 78.11 |
A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read. *This bug only affects Firefox on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 78.11, Firefox < 89, and Firefox ESR < 78.11.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free