These vulnerabilities were addressed in
- Mozilla Firefox version 150
- Mozilla Firefox ESR version 140.10
- Mozilla Thunderbird version 150
If you are a datajar.mobi Fully Managed or Hybrid customer, this update has been released via our Auto-Update framework and macOS devices within scope should receive this patch within 30 minutes of coming online.
If your organisation has a Jamf Auto Update subscription and you are deploying Mozilla Firefox or Thunderbird via Jamf Auto Update, we suggest you flush any policies to trigger the update when macOS devices next check-in.
If you have any problems, concerns or questions, please let us know.
More information on these updates can be found here:
https://www.mozilla.org/en-US/security/advisories/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-30/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-31/
https://www.mozilla.org/en-US/security/advisories/mfsa2026-32/