Vulnerabilities

TI-2023-03764 CVE-2023-4057 · GHSA-cj4r-xrp8-3mj8

Out-of-bounds write in Mozilla Firefox

MEDIUM 51

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00888 Published 2023-08-01 Partial fix · 116, 115.1 CWE-787

TI-2023-03761 CVE-2023-4054 · GHSA-ww29-fh6f-953x

LOW 24

When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00208 Published 2023-08-01 Fixed in 116, 102.14 +1

TI-2023-03759 CVE-2023-4052 · GHSA-gjqm-928w-fr7f

LOW 30

The Firefox updater created a directory writable by non-privileged users.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00711 Published 2023-08-01 Fixed in 116, 115.1 CWE-59