Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2023-04764 CVE-2023-5176 · GHSA-238m-xccf-m2f6

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 52

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01388 Published 2023-09-27 Partial fix · 118, 115.3 CWE-787
TI-2023-04762 CVE-2023-5174 · GHSA-8fw2-629c-5885

Use after free in Mozilla Firefox

Priority MEDIUM 51

If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.012 Published 2023-09-27 Fixed in 118, 115.3 CWE-416
TI-2023-04759 CVE-2023-5171 · GHSA-v567-j6g5-phvx

Use after free in Mozilla Firefox

Priority LOW 31

During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potentially exploitable crash.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01116 Published 2023-09-27 Partial fix · 118, 115.3 CWE-416
TI-2023-04757 CVE-2023-5169 · GHSA-65f9-wqxf-mh9r

Out-of-bounds write in Mozilla Firefox

Priority LOW 31

A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01095 Published 2023-09-27 Partial fix · 118, 115.3 CWE-787
TI-2023-04756 CVE-2023-5168 · GHSA-jw9m-8h6f-3q76

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 51

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01116 Published 2023-09-27 Fixed in 118, 115.3 CWE-787