Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

TI-2023-18844 CVE-2023-37211 · GHSA-xjqq-3xrg-fh6j

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00753 Published 2023-07-05 Partial fix · 115, 102.13 CWE-787
TI-2023-18841 CVE-2023-37208 · GHSA-7f9h-g35v-jfqh

Unrestricted file upload in Mozilla Firefox

Priority HIGH 69

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00234 Published 2023-07-05 Partial fix · 115, 102.13 CWE-434
TI-2023-18835 CVE-2023-37202 · GHSA-hhm4-xgvr-x3rg

Use after free in Mozilla Firefox

Priority MEDIUM 41

Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00755 Published 2023-07-05 Partial fix · 115, 102.13 CWE-416
TI-2023-18834 CVE-2023-37201 · GHSA-75qj-fcp3-j9w2

Use after free in Mozilla Firefox

Priority HIGH 73

An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00755 Published 2023-07-05 Partial fix · 115, 102.13 CWE-416