# MA-853.082022: MyCERT Advisory - Mozilla Releases Security Updates for Firefox, Firefox ESR, and Thunderbird

**Date:** 25 Aug 2022  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-853.082022  
**Advisory ID:** MA-853.082022

---

**1.0 Introduction**
Recently, Mozilla has released security updates to address vulnerabilities in Firefox, Firefox ESR, and Thunderbird. 
**2.0 Impact**
An attacker could exploit some of these vulnerabilities to take control of an affected system.
**3.0 Affected Product**
The affected Mozilla product are Firefox 104, Firefox ESR 91.13, Firefox ESR 102.2 and Thunderbird 91.13, Thunderbird 102.2
**4.0 Recommendations**
Users and administrators are recommended to review the below URLs and perform the necessary update. Kindly refer to the below URL:
*• Fixed in Firefox 104*
<https://www.mozilla.org/en-US/security/advisories/mfsa2022-33/>
*• Fixed in Firefox ESR 91.13*
<https://www.mozilla.org/en-US/security/advisories/mfsa2022-35/>
*• Fixed in Firefox ESR 102.2*
<https://www.mozilla.org/en-US/security/advisories/mfsa2022-34/>
*• Fixed in Thunderbird 91.13*
<https://www.mozilla.org/en-US/security/advisories/mfsa2022-37/>
*• Fixed in Thunderbird 102.2*
<https://www.mozilla.org/en-US/security/advisories/mfsa2022-36/>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 09:00 -18:00 MYT 
Web: <https://www.mycert.org.my> 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
• <https://www.cisa.gov/uscert/ncas/current-activity/2022/08/23/mozilla-releases-security-updates-firefox-firefox-esr-and>
• <https://www.mozilla.org/en-US/security/advisories/mfsa2022-33/>
• <https://www.mozilla.org/en-US/security/advisories/mfsa2022-34/>
• <https://www.mozilla.org/en-US/security/advisories/mfsa2022-35/>
• <https://www.mozilla.org/en-US/security/advisories/mfsa2022-36/>
• <https://www.mozilla.org/en-US/security/advisories/mfsa2022-37/>