Every CVE Search/ Get API key

CVE-2023-4057

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...

9.8 CriticalFix available

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.89%Up 0.8 points since Aug 2, 2023
90%50%10%1%

What each source reports

NVD Score used 9.8

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
CVE-2023-4057
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
CVE-2023-4057
Updated
2026-11-02
EUVDEUVD-2023-53948 0.0

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
EUVD-2023-53948
CVSS
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-cj4r-xrp8-3mj8 9.8

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116 and Firefox ESR < 115.1.

Record
GHSA-cj4r-xrp8-3mj8
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVALPINE-CVE-2023-4057 9.8

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
ALPINE-CVE-2023-4057
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 9.8

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
CVE-2023-4057
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 36 moreShow less
OSVDEBIAN-CVE-2023-4057 9.8

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
DEBIAN-CVE-2023-4057
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4460 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4460
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4461 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4461
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4462 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4462
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4463 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4463
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4464 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4464
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4465 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4465
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4468 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4468
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4469 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:4469
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4492 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4492
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4493 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4493
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4494 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4494
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4495 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4495
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4496 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4496
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4497 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4497
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4499 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4499
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:4500 9.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:4500
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:4462 7.5

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.14.0 ESR.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)

  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)

  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:4462
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:4468 7.5

Important: firefox security update

TODO: add package description

This update upgrades Firefox to version 102.14.0 ESR.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)

  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)

  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:4468
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:4497 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)

  • Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)

  • thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417)

  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:4497
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:4499 7.5

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)

  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)

  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)

  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)

  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)

  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)

  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)

  • Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)

  • thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417)

  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:4499
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2023-4057 9.8

Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

Record
UBUNTU-CVE-2023-4057
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:4462 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.14.0 ESR.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:4462
Updated
2026-11-02
OSVALSA-2023:4468 No score

Important: firefox security update

TODO: add package description

This update upgrades Firefox to version 102.14.0 ESR.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:4468
Updated
2026-11-02
OSVALSA-2023:4497 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
  • Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
  • thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417)
  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:4497
Updated
2026-11-02
OSVALSA-2023:4499 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.14.0.

Security Fix(es):

  • Mozilla: Offscreen Canvas could have bypassed cross-origin restrictions (CVE-2023-4045)
  • Mozilla: Incorrect value used during WASM compilation (CVE-2023-4046)
  • Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-4047)
  • Mozilla: Crash in DOMParser due to out-of-memory conditions (CVE-2023-4048)
  • Mozilla: Fix potential race conditions when releasing platform objects (CVE-2023-4049)
  • Mozilla: Stack buffer overflow in StorageManager (CVE-2023-4050)
  • Mozilla: Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14 (CVE-2023-4056)
  • Mozilla: Memory safety bugs fixed in Firefox ESR 115.1, and Thunderbird 115.1 (CVE-2023-4057)
  • thunderbird: File Extension Spoofing using the Text Direction Override Character (CVE-2023-3417)
  • Mozilla: Cookie jar overflow caused unexpected cookie jar state (CVE-2023-4055)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:4499
Updated
2026-11-02
OSVMGASA-2023-0266 No score

Updated firefox/thunderbird packages fix security vulnerability

Use-after-free in workers. (CVE-2023-3600)

File Extension Spoofing using the Text Direction Override Character. (CVE-2023-3417)

Offscreen Canvas could have bypassed cross-origin restrictions. (CVE-2023-4045)

Incorrect value used during WASM compilation. (CVE-2023-4046)

Potential permissions request bypass via clickjacking. (CVE-2023-4047)

Crash in DOMParser due to out-of-memory conditions. (CVE-2023-4048)

Fix potential race conditions when releasing platform objects. (CVE-2023-4049)

Stack buffer overflow in StorageManager. (CVE-2023-4050)

Cookie jar overflow caused unexpected cookie jar state. (CVE-2023-4055)

Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, Firefox ESR 102.14, Thunderbird 115.1, and Thunderbird 102.14. (CVE-2023-4056)

Memory safety bugs fixed in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. (CVE-2023-4057)

Memory corruption in IPC CanvasTranslator. (CVE-2023-4573)

Memory corruption in IPC ColorPickerShownCallback. (CVE-2023-4574)

Memory corruption in IPC FilePickerShownCallback. (CVE-2023-4575)

Integer Overflow in RecordedSourceSurfaceCreation. (CVE-2023-4576)

Memory corruption in JIT UpdateRegExpStatics. (CVE-2023-4577)

Full screen notification obscured by file open dialog. (CVE-2023-4051)

Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception. (CVE-2023-4578)

Full screen notification obscured by external program. (CVE-2023-4053)

Push notifications saved to disk unencrypted. (CVE-2023-4580)

XLL file extensions were downloadable without warnings. (CVE-2023-4581)

Browsing Context potentially not cleared when closing Private Window. (CVE-2023-4583)

Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2. (CVE-2023-4584)

Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. (CVE-2023-4585)

Heap buffer overflow in libwebp. (CVE-2023-4863)

Record
MGASA-2023-0266
Updated
2026-11-02
OSVopenSUSE-SU-2024:13124-1 No score

MozillaFirefox-116.0.2-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-116.0.2-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13124-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13202-1 No score

MozillaThunderbird-115.2.0-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-115.2.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13202-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2023:3161-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues:

Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746).

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Record
SUSE-SU-2023:3161-1
Updated
2026-11-02
OSVSUSE-SU-2023:3162-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues:

Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746):

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657)
Record
SUSE-SU-2023:3162-1
Updated
2026-11-02
OSVSUSE-SU-2023:3163-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following security issues:

Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746).

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Record
SUSE-SU-2023:3163-1
Updated
2026-11-02
OSVSUSE-SU-2023:3228-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Update Mozilla Thunderbird 115.1.0 (bsc#1213746):

  • CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876).
  • CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686).
  • CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073).
  • CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368).
  • CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658).
  • CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038).
  • CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420).
  • CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777).
  • CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561).
  • CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847).
  • CVE-2023-4057: Fixed memory safety bugs (bmo#1841682).

Bugfixes:

  • Remove bashisms from startup-script (bsc#1213657).
Record
SUSE-SU-2023:3228-1
Updated
2026-11-02
OSVUSN-6267-1 No score

firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-4047, CVE-2023-4048, CVE-2023-4049, CVE-2023-4051, CVE-2023-4053, CVE-2023-4055, CVE-2023-4056, CVE-2023-4057, CVE-2023-4058)

Max Vlasov discovered that Firefox Offscreen Canvas did not properly track cross-origin tainting. An attacker could potentially exploit this issue to access image data from another site in violation of same-origin policy. (CVE-2023-4045)

Alexander Guryanov discovered that Firefox did not properly update the value of a global variable in WASM JIT analysis in some circumstances. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-4046)

Mark Brand discovered that Firefox did not properly validate the size of an untrusted input stream. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-4050)

Record
USN-6267-1
Updated
2026-11-02
OSVUSN-6405-1 No score

thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute arbitrary code. (CVE-2023-4057, CVE-2023-4577, CVE-2023-4578, CVE-2023-4583, CVE-2023-4585, CVE-2023-5169, CVE-2023-5171, CVE-2023-5176)

Andrew McCreight discovered that Thunderbird did not properly manage during the worker lifecycle. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-3600)

Harveer Singh discovered that Thunderbird did not store push notifications in private browsing mode in encrypted form. An attacker could potentially exploit this issue to obtain sensitive information. (CVE-2023-4580)

Clément Lecigne discovered that Thunderbird did not properly manage memory when handling VP8 media stream. An attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2023-5217)

Record
USN-6405-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.18
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.19
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.20
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.21
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.22
 before 115.1.0-r0
115.1.0-r0
firefox-esr
Alpine:v3.23
 before 115.1.0-r0
115.1.0-r0
firefox
AlmaLinux:9
From an advisory covering 9 CVEs
 before 102.14.0-1.el9_2.alma
102.14.0-1.el9_2.alma
firefox-x11
AlmaLinux:9
From an advisory covering 9 CVEs
 before 102.14.0-1.el9_2.alma
102.14.0-1.el9_2.alma
firefox
AlmaLinux:8
From an advisory covering 9 CVEs
 before 102.14.0-1.el8_8.alma
102.14.0-1.el8_8.alma
thunderbird
AlmaLinux:8
From an advisory covering 10 CVEs
 before 102.14.0-1.el8_8.alma
102.14.0-1.el8_8.alma
Show 141 moreShow less
Affected packages
PackageAffectedFixed
thunderbird
AlmaLinux:9
From an advisory covering 10 CVEs
 before 102.14.0-1.el9_2.alma
102.14.0-1.el9_2.alma
firefox-esr
Debian:13
 before 115.1.0esr-1
115.1.0esr-1
firefox-esr
Debian:14
 before 115.1.0esr-1
115.1.0esr-1
thunderbird
Debian:13
 before 1:115.1.0-1
1:115.1.0-1
thunderbird
Debian:14
 before 1:115.1.0-1
1:115.1.0-1
rootcerts
Mageia:8
From an advisory covering 25 CVEs
 before 20230720.00-1.mga8
20230720.00-1.mga8
nss
Mageia:8
From an advisory covering 25 CVEs
 before 3.93.0-1.mga8
3.93.0-1.mga8
firefox
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
firefox-l10n
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
thunderbird
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
thunderbird-l10n
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
rootcerts
Mageia:9
From an advisory covering 25 CVEs
 before 20230720.00-1.mga9
20230720.00-1.mga9
nss
Mageia:9
From an advisory covering 25 CVEs
 before 3.93.0-1.mga9
3.93.0-1.mga9
firefox
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.1-1.mga9
115.2.1-1.mga9
firefox-l10n
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.1-1.mga9
115.2.1-1.mga9
thunderbird
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.2-1.mga9
115.2.2-1.mga9
thunderbird-l10n
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.2-1.mga9
115.2.2-1.mga9
firefox
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
firefox
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
firefox-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
firefox-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
firefox-x11
Red Hat:enterprise_linux:9::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
firefox
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_6
0:102.14.0-1.el8_6
firefox-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_6
0:102.14.0-1.el8_6
firefox-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_6
0:102.14.0-1.el8_6
firefox
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_1
0:102.14.0-1.el8_1
firefox-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_1
0:102.14.0-1.el8_1
firefox-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_1
0:102.14.0-1.el8_1
firefox
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_0
0:102.14.0-1.el9_0
firefox-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_0
0:102.14.0-1.el9_0
firefox-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_0
0:102.14.0-1.el9_0
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
firefox
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_1
0:102.14.0-1.el8_1
thunderbird-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_1
0:102.14.0-1.el8_1
thunderbird-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_1
0:102.14.0-1.el8_1
thunderbird
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_6
0:102.14.0-1.el8_6
thunderbird-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_6
0:102.14.0-1.el8_6
thunderbird-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_6
0:102.14.0-1.el8_6
thunderbird
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_0
0:102.14.0-1.el9_0
thunderbird-debuginfo
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_0
0:102.14.0-1.el9_0
thunderbird-debugsource
Red Hat:rhel_eus:9.0::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_0
0:102.14.0-1.el9_0
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el7_9
0:102.14.0-1.el7_9
thunderbird
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_2
0:102.14.0-1.el8_2
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
thunderbird
Red Hat:enterprise_linux:9::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
thunderbird-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
thunderbird-debugsource
Red Hat:enterprise_linux:9::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
thunderbird-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_4
0:102.14.0-1.el8_4
firefox
Rocky Linux:9
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
firefox
Rocky Linux:8
From an advisory covering 9 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
thunderbird
Rocky Linux:8
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el8_8
0:102.14.0-1.el8_8
thunderbird
Rocky Linux:9
From an advisory covering 10 CVEs
 before 0:102.14.0-1.el9_2
0:102.14.0-1.el9_2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 115.1.0-112.173.1
115.1.0-112.173.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Enterprise Storage 7.1
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
openSUSE:Leap 15.5
From an advisory covering 11 CVEs
 before 115.1.0-150200.152.99.1
115.1.0-150200.152.99.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150000.150.97.1
115.1.0-150000.150.97.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 115.1.0-150000.150.97.1
115.1.0-150000.150.97.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 11 CVEs
 before 115.1.0-150000.150.97.1
115.1.0-150000.150.97.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
MozillaThunderbird
openSUSE:Leap 15.5
From an advisory covering 11 CVEs
 before 115.1.0-150200.8.127.1
115.1.0-150200.8.127.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
thunderbird
Ubuntu:20.04:LTS
 before 1:115.3.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 30 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.11:102.15.1+build1-0ubuntu0.20.04.1
1:115.3.1+build1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:115.3.1+build1-0ubuntu0.22.04.2, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 19 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.1
1:115.3.1+build1-0ubuntu0.22.04.2
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
firefox
Ubuntu:20.04:LTS
From an advisory covering 12 CVEs
 before 116.0+build2-0ubuntu0.20.04.2, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
116.0+build2-0ubuntu0.20.04.2
thunderbird
Ubuntu:20.04:LTS
From an advisory covering 11 CVEs
 before 1:115.3.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 30 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.11:102.15.1+build1-0ubuntu0.20.04.1
1:115.3.1+build1-0ubuntu0.20.04.1
thunderbird
Ubuntu:22.04:LTS
From an advisory covering 11 CVEs
 before 1:115.3.1+build1-0ubuntu0.22.04.2, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 19 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.1
1:115.3.1+build1-0ubuntu0.22.04.2
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 14 CVEs
 before 116.0.2-1.1
116.0.2-1.1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 16 CVEs
 before 115.2.0-1.1
115.2.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4057 is a critical vulnerability (CVSS 9.8) in Mozilla Firefox, published August 1, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. Fixed in firefox-esr 115.1.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 41 versions and 1,817 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open