Priority LOW 31
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01049 · Published 2023-10-24 · Partial fix · 117, 115.4 +1
Priority MEDIUM 52
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01541 · Published 2023-10-24 · Partial fix · 119, 115.4 +1 CWE-787
Priority MEDIUM 42
During garbage collection extra operations were performed on a object that should not be.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01321 · Published 2023-10-24 · Partial fix · 119, 115.4 +1 CWE-416
Priority LOW 30
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00829 · Published 2023-10-24 · Fixed in 119, 115.4 +1
Priority LOW 21
A website could have obscured the full screen notification by using the file open dialog.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00694 · Published 2023-10-24 · Fixed in 119, 115.4 +1
Priority LOW 22
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00935 · Published 2023-10-24 · Partial fix · 119, 115.4 +1
Priority MEDIUM 42
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01521 · Published 2023-10-24 · Partial fix · 119, 115.4 +1 CWE-400
Priority LOW 22
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00807 · Published 2023-10-24 · Partial fix · 119, 115.4 +1 CWE-1021
THREATIST.IORead the docs