firefox is vulnerable to arbitrary code execution. The vulnerability exists through memory safety bugs.
lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html
lists.opensuse.org/opensuse-security-announce/2020-01/msg00043.html
packetstormsecurity.com/files/155912/Slackware-Security-Advisory-mozilla-thunderbird-Updates.html
access.redhat.com/errata/RHSA-2020:0085
access.redhat.com/errata/RHSA-2020:0086
access.redhat.com/errata/RHSA-2020:0111
access.redhat.com/errata/RHSA-2020:0120
access.redhat.com/errata/RHSA-2020:0123
access.redhat.com/errata/RHSA-2020:0127
access.redhat.com/errata/RHSA-2020:0292
access.redhat.com/errata/RHSA-2020:0295
bugzilla.mozilla.org/buglist.cgi?bug_id=1507180%2C1595470%2C1598605%2C1601826
lists.debian.org/debian-lts-announce/2020/01/msg00005.html
lists.debian.org/debian-lts-announce/2020/01/msg00016.html
seclists.org/bugtraq/2020/Jan/12
seclists.org/bugtraq/2020/Jan/18
seclists.org/bugtraq/2020/Jan/26
security.gentoo.org/glsa/202003-02
usn.ubuntu.com/4234-1/
usn.ubuntu.com/4241-1/
usn.ubuntu.com/4335-1/
www.debian.org/security/2020/dsa-4600
www.debian.org/security/2020/dsa-4603
www.mozilla.org/security/advisories/mfsa2020-01/
www.mozilla.org/security/advisories/mfsa2020-02/