TI-2023-05273 CVE-2023-5730 · GHSA-hwgx-3qq3-2885
Out-of-bounds write in Mozilla Firefox
Priority MEDIUM 52
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3.
RHSA-2023:6185
firefox security update
Released 2023-10-30 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AppStream AUS (v. 8.2) firefox-115.4.0-1.el8_2
- Red Hat Enterprise Linux AppStream E4S (v. 8.2) firefox-115.4.0-1.el8_2
- Red Hat Enterprise Linux AppStream TUS (v. 8.2) firefox-115.4.0-1.el8_2
Fixes 7 records
TI-2023-23980 CVE-2023-44488 · GHSA-wc24-pw3j-j6vw
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
Priority MEDIUM 43
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
TI-2023-05271 CVE-2023-5728 · GHSA-3qmg-867g-8xrq
Use after free in Mozilla Firefox
Priority MEDIUM 42
During garbage collection extra operations were performed on a object that should not be.
TI-2023-05267 CVE-2023-5724 · GHSA-hhqg-994q-93m3
Uncontrolled resource consumption in Mozilla Firefox
Priority MEDIUM 42
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash.
TI-2023-05275 CVE-2023-5732 · GHSA-p85h-gwrr-6mrj
Address bar spoofing via bidirectional characters
Priority LOW 31
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited.
TI-2023-05268 CVE-2023-5725 · GHSA-vhm9-v8x6-w764
A malicious installed WebExtension could open arbitrary URLs, which under the right…
Priority LOW 22
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data.
TI-2023-05264 CVE-2023-5721 · GHSA-cw53-7m4g-22j6
Clickjacking in Mozilla Firefox
Priority LOW 22
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay.