Every CVE Search/ Get API key

CVE-2023-4052

The Firefox updater created a directory writable by non-privileged users. When uninstalling...

6.5 MediumFix available

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.71%Up 0.7 points since Aug 2, 2023
90%50%10%1%

What each source reports

NVD Score used 6.5

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
CVE-2023-4052
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
CVE List No score

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
CVE-2023-4052
Updated
2026-11-02
EUVDEUVD-2023-53943 0.0

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
EUVD-2023-53943
CVSS
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-gjqm-928w-fr7f 6.5

The Firefox updater created a directory writable by non-privileged users. When uninstalling...

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116 and Firefox ESR < 115.1.

Record
GHSA-gjqm-928w-fr7f
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Weakness
CWE-59
Updated
2026-11-02
OSVALPINE-CVE-2023-4052 6.5

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
ALPINE-CVE-2023-4052
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-03
OSVUBUNTU-CVE-2023-4052 6.5

The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
UBUNTU-CVE-2023-4052
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 7 moreShow less
OSVopenSUSE-SU-2024:13124-1 No score

MozillaFirefox-116.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-116.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13124-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13202-1 No score

MozillaThunderbird-115.2.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-115.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13202-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2023:3161-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues:

Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746).

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Record
SUSE-SU-2023:3161-1
Updated
2026-11-02
OSVSUSE-SU-2023:3162-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues:

Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746):

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657)
Record
SUSE-SU-2023:3162-1
Updated
2026-11-02
OSVSUSE-SU-2023:3163-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues:

Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746).

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Record
SUSE-SU-2023:3163-1
Updated
2026-11-02
OSVSUSE-SU-2023:3228-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Update Mozilla Thunderbird 115.1.0 (bsc#1213746):

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Record
SUSE-SU-2023:3228-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.18
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.19
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.20
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.21
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.22
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.23
 before 115.1.0-r0
115.1.0-r0
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
Show 32 moreShow less
Affected packages
PackageAffectedFixed
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Enterprise Storage 7.1
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
openSUSE:Leap 15.5
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150000.150.97.1
115.1.0-150000.150.97.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150000.150.97.1
115.1.0-150000.150.97.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 11 CVEs
 before 115.1.0-150000.150.97.1
115.1.0-150000.150.97.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
openSUSE:Leap 15.5
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 116.0.2-1.1
116.0.2-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
 before 115.2.0-1.1
115.2.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4052 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published August 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.71%, the 53rd percentile. Fixed in firefox-esr 115.1.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,676 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open