TI-2023-09435 CVE-2023-23606 · GHSA-gwc9-8q5h-cr4c
Memory safety bugs fixed in Firefox 109
Priority MEDIUM 41
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108.
Vulnerabilities
10 records
TI-2023-09434 CVE-2023-23605 · GHSA-w9xw-rq9v-758p
Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7
Priority MEDIUM 41
Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6.
TI-2023-09433 CVE-2023-23604 · GHSA-5997-5448-jfqf
Creation of duplicate SystemPrincipal from less secure contexts
Priority LOW 29
A duplicate `SystemPrincipal` object could be created when parsing a non-system html document via `DOMParser::ParseFromSafeString`.
TI-2023-09432 CVE-2023-23603 · GHSA-3r46-584r-xx8v
Calls to console.log allowed bypassing Content Security Policy via format directive
Priority LOW 30
Regular expressions used to filter out forbidden properties and values from style directives in calls to `console.log` weren't accounting for external URLs.
TI-2023-09431 CVE-2023-23602 · GHSA-457f-c77p-7wc3
Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers
Priority MEDIUM 62
A mishandled security check when creating a WebSocket in a WebWorker caused the Content Security Policy connect-src header to be ignored.
TI-2023-09430 CVE-2023-23601 · GHSA-4982-x52g-9jjx
URL being dragged from cross-origin iframe into same tab triggers navigation
Priority LOW 29
Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks This vulnerability affects Firefox < 109, Firefox ESR < 102.7, and Thunderbird…
TI-2023-09429 CVE-2023-23600 · GHSA-hv5h-mf6r-57mp
Notification permissions persisted between Normal and Private Browsing on Android
Priority LOW 29
Per origin notification permissions were being stored in a way that didn't take into account what browsing context the permission was granted in.
TI-2023-09428 CVE-2023-23599 · GHSA-x86f-c5g7-4mrq
Malicious command could be hidden in devtools output on Windows
Priority LOW 30
When copying a network request from the developer tools panel as a curl command the output was not being properly sanitized and could allow arbitrary commands to be hidden within.
TI-2023-09427 CVE-2023-23598 · GHSA-h2qp-p99q-hmrr
Arbitrary file read from GTK drag and drop on Linux
Priority LOW 30
Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to `DataTransfer.setDat…
TI-2023-09426 CVE-2023-23597 · GHSA-5gvm-v5f4-x692
Logic bug in process allocation allowed to read arbitrary files
Priority LOW 29
A compromised web child process could disable web security opening restrictions, leading to a new child process being spawned within the `file://` context.