TI-2023-18834 CVE-2023-37201 · GHSA-75qj-fcp3-j9w2
Use after free in Mozilla Firefox
Priority HIGH 73
An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS.
RHSA-2023:4068
thunderbird security update
Released 2023-07-13 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) thunderbird-102.13.0-2.el8_2
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) thunderbird-102.13.0-2.el8_2
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) thunderbird-102.13.0-2.el8_2
Fixes 5 records
TI-2023-18841 CVE-2023-37208 · GHSA-7f9h-g35v-jfqh
Unrestricted file upload in Mozilla Firefox
Priority HIGH 69
When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code.
TI-2023-18840 CVE-2023-37207 · GHSA-jpg7-857p-mpqg
A website could have obscured the fullscreen notification by using a URL with a scheme…
Priority MEDIUM 62
A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL.
TI-2023-18844 CVE-2023-37211 · GHSA-xjqq-3xrg-fh6j
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 41
Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12.
TI-2023-18835 CVE-2023-37202 · GHSA-hhm4-xgvr-x3rg
Use after free in Mozilla Firefox
Priority MEDIUM 41
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free.