Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.
https://access.redhat.com/errata/RHSA-2018:0526
https://access.redhat.com/errata/RHSA-2018:0527
https://access.redhat.com/errata/RHSA-2018:0647
https://access.redhat.com/errata/RHSA-2018:0648
https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
https://security.gentoo.org/glsa/201810-01
https://security.gentoo.org/glsa/201811-13
https://usn.ubuntu.com/3545-1/
https://usn.ubuntu.com/3596-1/
https://usn.ubuntu.com/3688-1/
https://www.debian.org/security/2018/dsa-4139
https://www.debian.org/security/2018/dsa-4155
https://www.mozilla.org/security/advisories/mfsa2018-06/
https://www.mozilla.org/security/advisories/mfsa2018-07/