Mozilla has released updates to its Firefox browser and Thunderbird e-mail client that fix a number of critical security flaws in the open-source products.The Firefox update, which was in the process of being automatically delivered to Firefox 1.5 users Friday, addresses 12 security flaws. The release also includes some fixes designed to make the browser more stable, Mozilla said on its website.Five of the browser flaws are serious enough that an attacker could possibly use them to run unauthorized software on an unpatched system, Mozilla says. Security vendor Secunia rates this update as “highly critical,” its second-highest rating of importance.There are a couple of mitigating factors, however. First, hackers must still develop code that takes advantage of these flaws before users can be attacked. Second, a user would need to be tricked into visiting a malicious website for the attack to occur. Eight bugs have been fixed in Thunderbird, one of which is considered critical by Mozilla.More details on the Firefox vulnerabilities can be found here. Descriptions of the Thunderbird flaws can be found here.–Robert McMillan, IDG News ServiceFor related news coverage, read Microsoft Flaw Affects Windows XP, Windows Server 2003.Check out our CIO News Alerts and Tech Informer pages for more updated news coverage. Related content brandpost Sponsored by Freshworks When your AI chatbots mess up AI ‘hallucinations’ present significant business risks, but new types of guardrails can keep them from doing serious damage By Paul Gillin Dec 08, 2023 4 mins Generative AI brandpost Sponsored by Dell New research: How IT leaders drive business benefits by accelerating device refresh strategies Security leaders have particular concerns that older devices are more vulnerable to increasingly sophisticated cyber attacks. By Laura McEwan Dec 08, 2023 3 mins Infrastructure Management case study Toyota transforms IT service desk with gen AI To help promote insourcing and quality control, Toyota Motor North America is leveraging generative AI for HR and IT service desk requests. By Thor Olavsrud Dec 08, 2023 7 mins Employee Experience Generative AI ICT Partners feature CSM certification: Costs, requirements, and all you need to know The Certified ScrumMaster (CSM) certification sets the standard for establishing Scrum theory, developing practical applications and rules, and leading teams and stakeholders through the development process. By Moira Alexander Dec 08, 2023 8 mins Certifications IT Skills Project Management Podcasts Videos Resources Events SUBSCRIBE TO OUR NEWSLETTER From our editors straight to your inbox Get started by entering your email address below. Please enter a valid email address Subscribe