Red Hat Security Advisory

RHSA-2023:1364

firefox security update

Released 2023-03-21 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-12731 CVE-2023-28162 · GHSA-4x64-w698-xf5g

HIGH 73

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00702 Published 2023-06-02 Partial fix · 111, 102.9 CWE-843

TI-2023-12733 CVE-2023-28164 · GHSA-vx2v-7cpp-943m

MEDIUM 62

Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00347 Published 2023-06-02 Partial fix · 111, 102.9 CWE-346

TI-2023-11023 CVE-2023-25751 · GHSA-vqx7-j992-3mg7

MEDIUM 62

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0069 Published 2023-06-02 Partial fix · 111, 102.9

TI-2023-12745 CVE-2023-28176 · GHSA-jgm5-8hh7-2h6w

MEDIUM 41

Memory safety bugs present in Firefox 110 and Firefox ESR 102.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00719 Published 2023-06-02 Partial fix · 111, 102.9 CWE-787

TI-2023-11024 CVE-2023-25752 · GHSA-7f6h-8948-xq6j

LOW 30

When accessing throttled streams, the count of available bytes needed to be checked in the calling function to be within bounds.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0061 Published 2023-06-02 Partial fix · 111, 102.9