Mozilla products: multiple vulnerabilities | 09/17
HKCERT lists security issues in Mozilla products, with potential impacts including remote code execution, service disruption and unauthorised privilege escalation.
Basis: the headline or summary mentions a vulnerability, malware or a data incident; check applicability. GDMME follow-up priority uses official ratings and headline/summary rules. It is not a CVSS score or official vulnerability rating, and does not confirm that your business is affected.
Source severity
中度風險（HKCERT）
Affected scope
Scope listed in the advisory: Versions earlier than: Firefox 156; Firefox ESR 115.41; Firefox ESR 140.16; Firefox ESR 153.3; Thunderbird 140.16; Thunderbird 153.3; Thunderbird 156.
Official recommendations
Automatically extracted recommendation passages from the official source, retained in the source language. Check the complete advisory.
- 在安裝軟體之前 請先瀏覽供應商之官方網站 以獲得更多詳細資料
- 更新至版本:
- Firefox 156
- Firefox ESR 115.41
- Firefox ESR 140.16
- Firefox ESR 153.3
- Thunderbird 140.16
- Thunderbird 153.3
The last successful extraction is used here. Check the official source for the latest content.
These are excerpts; some text has been shortened. Read the complete official advisory.
Source text collected (Hong Kong time)：2026/10/12 02:44 HKT
官方原文建議自動摘錄 未作逐篇人工分析或翻譯；請核對完整公告、現行版本及適用性
GDMME recommended actions
GDMME recommendations · automatically organised from explicit products and source signals, without individual human analysis. Confirm applicability against vendor guidance and your environment.
- Locate Mozilla Firefox deployments, running versions and service owners in your inventory or management console; compare them with the vendor applicability criteria. A named product does not mean every deployment is affected.
- For Mozilla Firefox, confirm that updates are applied through central management or device checks. When the vendor requires it, reopen the browser/application or restart the device, then verify the running version rather than merely the downloaded update.
- Once Mozilla Firefox applicability is confirmed, check the official excerpt and complete vendor patch/mitigation instructions. Record before/after versions, test results and rollback steps; do not install updates solely from a news headline.
Automatically organised (Hong Kong time)：2026/10/12 03:05 HKT
Educational information only. Confirm affected versions, mitigations and exploitation status with the original vendor advisory. Reports do not imply that GDMME equipment blocks every vulnerability.