Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Mozilla Firefox 114 Clear all filters
TI-2023-17244 CVE-2023-34417 · GHSA-jr8c-7w56-v2rh

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 50

Memory safety bugs present in Firefox 113.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0078 Published 2023-06-19 Fixed in 114 CWE-787
TI-2023-17242 CVE-2023-34415 · GHSA-7wmp-qghr-8g7f

Open redirect in Mozilla Firefox

Priority LOW 27

When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site that issued the redirect.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00413 Published 2023-06-19 Fixed in 114 CWE-601
TI-2023-17243 CVE-2023-34416 · GHSA-94qw-3pc5-wwcm

Out-of-bounds write in Mozilla Firefox ESR

Priority MEDIUM 44

Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0093 Published 2023-06-19 Partial fix · 102.12, 114 CWE-787
TI-2023-17241 CVE-2023-34414 · GHSA-75j9-5hgg-gprr

Improper certificate validation in Mozilla Firefox ESR

Priority LOW 17

The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays.

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00897 Published 2023-06-19 Partial fix · 102.12, 114 CWE-295