Mozilla fixes Firefox, Thunderbird zero-days exploited at Pwn2Own

If exploited, the two critical flaws can let attackers gain JavaScript code execution on mobile and desktop devices running vulnerable versions of Firefox, Firefox ESR, Firefox for Android, and Thunderbird.