Every CVE Search/ Get API key

CVE-2023-5727

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...

6.5 MediumFix available

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

0.83%Up 0.8 points since Oct 25, 2023
90%50%10%1%

What each source reports

NVD Score used 6.5

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Record
CVE-2023-5727
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
CVE List No score

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Record
CVE-2023-5727
Updated
2026-11-02
EUVDEUVD-2023-58013 0.0

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Record
EUVD-2023-58013
CVSS
0.0 NoneCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-5c37-6j7c-hr7x 6.5

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Record
GHSA-5c37-6j7c-hr7x
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVALPINE-CVE-2023-5727 6.5

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer.
Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Record
ALPINE-CVE-2023-5727
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-03
OSVUBUNTU-CVE-2023-5727 6.5

The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which can run commands on a user's computer. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1.

Record
UBUNTU-CVE-2023-5727
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 11 moreShow less
OSVopenSUSE-SU-2024:13356-1 No score

MozillaThunderbird-115.4.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-115.4.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13356-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13385-1 No score

MozillaFirefox-119.0-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-119.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13385-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13412-1 No score

libmozjs-115-0-115.4.0-1.1 on GA media

These are all security issues fixed in the libmozjs-115-0-115.4.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13412-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2023:4212-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Updated to version 115.4.0 ESR (bsc#1216338).

    • CVE-2023-5721: Fixed a potential clickjack via queued up rendering.
    • CVE-2023-5722: Fixed a cross-Origin size and header leakage.
    • CVE-2023-5723: Fixed unexpected errors when handling invalid cookie characters.
    • CVE-2023-5724: Fixed a crash due to a large WebGL draw.
    • CVE-2023-5725: Fixed an issue where WebExtensions could open arbitrary URLs.
    • CVE-2023-5726: Fixed an issue where fullscreen notifications would be obscured by file the open dialog on macOS.
    • CVE-2023-5727: Fixed a download protection bypass on on Windows.
    • CVE-2023-5728: Fixed a crash caused by improper object tracking during GC in the JavaScript engine.
    • CVE-2023-5729: Fixed an issue where fullscreen notifications would be obscured by WebAuthn prompts.
    • CVE-2023-5730: Fixed multiple memory safety issues.
    • CVE-2023-5731: Fixed multiple memory safety issues.
Record
SUSE-SU-2023:4212-1
Updated
2026-11-02
OSVSUSE-SU-2023:4213-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Updated to version 115.4.0 ESR (bsc#1216338).

    • CVE-2023-5721: Fixed a potential clickjack via queued up rendering.
    • CVE-2023-5722: Fixed a cross-Origin size and header leakage.
    • CVE-2023-5723: Fixed unexpected errors when handling invalid cookie characters.
    • CVE-2023-5724: Fixed a crash due to a large WebGL draw.
    • CVE-2023-5725: Fixed an issue where WebExtensions could open arbitrary URLs.
    • CVE-2023-5726: Fixed an issue where fullscreen notifications would be obscured by file the open dialog on macOS.
    • CVE-2023-5727: Fixed a download protection bypass on on Windows.
    • CVE-2023-5728: Fixed a crash caused by improper object tracking during GC in the JavaScript engine.
    • CVE-2023-5729: Fixed an issue where fullscreen notifications would be obscured by WebAuthn prompts.
    • CVE-2023-5730: Fixed multiple memory safety issues.
    • CVE-2023-5731: Fixed multiple memory safety issues.
Record
SUSE-SU-2023:4213-1
Updated
2026-11-02
OSVSUSE-SU-2023:4214-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Updated to version 115.4.0 ESR (bsc#1216338):

    • CVE-2023-5721: Fixed a potential clickjack via queued up rendering.
    • CVE-2023-5722: Fixed a cross-Origin size and header leakage.
    • CVE-2023-5723: Fixed unexpected errors when handling invalid cookie characters.
    • CVE-2023-5724: Fixed a crash due to a large WebGL draw.
    • CVE-2023-5725: Fixed an issue where WebExtensions could open arbitrary URLs.
    • CVE-2023-5726: Fixed an issue where fullscreen notifications would be obscured by file the open dialog on macOS.
    • CVE-2023-5727: Fixed a download protection bypass on on Windows.
    • CVE-2023-5728: Fixed a crash caused by improper object tracking during GC in the JavaScript engine.
    • CVE-2023-5729: Fixed an issue where fullscreen notifications would be obscured by WebAuthn prompts.
    • CVE-2023-5730: Fixed multiple memory safety issues.
    • CVE-2023-5731: Fixed multiple memory safety issues.
Record
SUSE-SU-2023:4214-1
Updated
2026-11-02
OSVSUSE-SU-2023:4302-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

  • Updated to version 115.4.1:

    • CVE-2023-5721: Fixed a potential clickjack via queued up rendering.
    • CVE-2023-5732: Fixed an address bar spoofing via bidirectional characters
    • CVE-2023-5724: Fixed a crash due to a large WebGL draw.
    • CVE-2023-5725: Fixed an issue where WebExtensions could open arbitrary URLs.
    • CVE-2023-5726: Fixed an issue where fullscreen notifications would be obscured by file the open dialog on macOS.
    • CVE-2023-5727: Fixed a download protection bypass on on Windows.
    • CVE-2023-5728: Fixed a crash caused by improper object tracking during GC in the JavaScript engine.
    • CVE-2023-5730: Fixed multiple memory safety issues.
Record
SUSE-SU-2023:4302-1
Updated
2026-11-02
OSVSUSE-SU-2023:4532-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230)

    • Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338)
    • CVE-2023-5721: Queued up rendering could have allowed websites to clickjack
    • CVE-2023-5732: Address bar spoofing via bidirectional characters
    • CVE-2023-5724: Large WebGL draw could have led to a crash
    • CVE-2023-5725: WebExtensions could open arbitrary URLs
    • CVE-2023-5726: Full screen notification obscured by file open dialog on macOS
    • CVE-2023-5727: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows
    • CVE-2023-5728: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    • CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1
Record
SUSE-SU-2023:4532-1
Updated
2026-11-02
OSVSUSE-SU-2023:4533-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230)

    • Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338)
    • CVE-2023-5721: Queued up rendering could have allowed websites to clickjack
    • CVE-2023-5732: Address bar spoofing via bidirectional characters
    • CVE-2023-5724: Large WebGL draw could have led to a crash
    • CVE-2023-5725: WebExtensions could open arbitrary URLs
    • CVE-2023-5726: Full screen notification obscured by file open dialog on macOS
    • CVE-2023-5727: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows
    • CVE-2023-5728: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    • CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1
Record
SUSE-SU-2023:4533-1
Updated
2026-11-02
OSVSUSE-SU-2023:4551-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 115.5.0 ESR Placeholder changelog-entry (bsc#1217230)

    • Fixed: Various security fixes and other quality improvements. MFSA 2023-46 (bsc#1216338)
    • CVE-2023-5721: Queued up rendering could have allowed websites to clickjack
    • CVE-2023-5732: Address bar spoofing via bidirectional characters
    • CVE-2023-5724: Large WebGL draw could have led to a crash
    • CVE-2023-5725: WebExtensions could open arbitrary URLs
    • CVE-2023-5726: Full screen notification obscured by file open dialog on macOS
    • CVE-2023-5727: Download Protections were bypassed by .msix, .msixbundle, .appx, and .appxbundle files on Windows
    • CVE-2023-5728: Improper object tracking during GC in the JavaScript engine could have led to a crash.
    • CVE-2023-5730: Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1
Record
SUSE-SU-2023:4551-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Alpine:v3.18
 before 119.0-r0
119.0-r0
firefox
Alpine:v3.19
 before 119.0-r0
119.0-r0
firefox
Alpine:v3.20
 before 119.0-r0
119.0-r0
firefox
Alpine:v3.21
 before 119.0-r0
119.0-r0
firefox
Alpine:v3.22
 before 119.0-r0
119.0-r0
firefox
Alpine:v3.23
 before 119.0-r0
119.0-r0
firefox-esr
Alpine:v3.18
 before 115.5.0-r0
115.5.0-r0
firefox-esr
Alpine:v3.19
 before 115.4.0-r0
115.4.0-r0
firefox-esr
Alpine:v3.20
 before 115.4.0-r0
115.4.0-r0
firefox-esr
Alpine:v3.21
 before 115.4.0-r0
115.4.0-r0
Show 67 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.22
 before 115.4.0-r0
115.4.0-r0
firefox-esr
Alpine:v3.23
 before 115.4.0-r0
115.4.0-r0
librewolf
Alpine:v3.22
 before 119.0-r0
119.0-r0
librewolf
Alpine:v3.23
 before 119.0-r0
119.0-r0
librewolf
Alpine:v3.24
 before 119.0-r0
119.0-r0
thunderbird
Alpine:v3.18
 before 115.4.0-r0
115.4.0-r0
thunderbird
Alpine:v3.19
 before 115.4.1-r0
115.4.1-r0
thunderbird
Alpine:v3.20
 before 115.4.1-r0
115.4.1-r0
thunderbird
Alpine:v3.21
 before 115.4.1-r0
115.4.1-r0
thunderbird
Alpine:v3.22
 before 115.4.1-r0
115.4.1-r0
thunderbird
Alpine:v3.23
 before 115.4.1-r0
115.4.1-r0
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 11 CVEs
 before 115.4.0-112.188.1
115.4.0-112.188.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 11 CVEs
 before 115.4.0-112.188.1
115.4.0-112.188.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 11 CVEs
 before 115.4.0-112.188.1
115.4.0-112.188.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 115.4.0-150000.150.113.1
115.4.0-150000.150.113.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 11 CVEs
 before 115.4.0-150000.150.113.1
115.4.0-150000.150.113.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 11 CVEs
 before 115.4.0-150000.150.113.1
115.4.0-150000.150.113.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
SUSE:Enterprise Storage 7.1
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
openSUSE:Leap 15.4
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaFirefox
openSUSE:Leap 15.5
From an advisory covering 11 CVEs
 before 115.4.0-150200.152.114.1
115.4.0-150200.152.114.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 8 CVEs
 before 115.4.1-150200.8.136.1
115.4.1-150200.8.136.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 8 CVEs
 before 115.4.1-150200.8.136.1
115.4.1-150200.8.136.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 8 CVEs
 before 115.4.1-150200.8.136.1
115.4.1-150200.8.136.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 8 CVEs
 before 115.4.1-150200.8.136.1
115.4.1-150200.8.136.1
MozillaThunderbird
openSUSE:Leap 15.4
From an advisory covering 8 CVEs
 before 115.4.1-150200.8.136.1
115.4.1-150200.8.136.1
MozillaThunderbird
openSUSE:Leap 15.5
From an advisory covering 8 CVEs
 before 115.4.1-150200.8.136.1
115.4.1-150200.8.136.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 115.5.0-112.191.1
115.5.0-112.191.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 115.5.0-112.191.1
115.5.0-112.191.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 115.5.0-112.191.1
115.5.0-112.191.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 115.5.0-150000.150.116.1
115.5.0-150000.150.116.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
From an advisory covering 8 CVEs
 before 115.5.0-150000.150.116.1
115.5.0-150000.150.116.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
From an advisory covering 8 CVEs
 before 115.5.0-150000.150.116.1
115.5.0-150000.150.116.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
SUSE:Enterprise Storage 7.1
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
openSUSE:Leap 15.4
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
MozillaFirefox
openSUSE:Leap 15.5
From an advisory covering 8 CVEs
 before 115.5.0-150200.152.117.1
115.5.0-150200.152.117.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
thunderbird
Ubuntu:20.04:LTS
 before 1:115.4.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 31 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.11:102.15.1+build1-0ubuntu0.20.04.11:115.3.1+build1-0ubuntu0.20.04.1
1:115.4.1+build1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
mozjs102
Ubuntu:22.04:LTS
 All versions, plus listed versions
102.11.0-0ubuntu0.22.04.1102.12.0-0ubuntu0.22.04.1102.13.0-0ubuntu0.22.04.1102.15.1-0ubuntu0.22.04.1
 None known
mozjs78
Ubuntu:22.04:LTS
 All versions, plus listed versions
78.13.0-178.15.0-278.15.0-4ubuntu1
 None known
mozjs91
Ubuntu:22.04:LTS
 All versions, plus listed versions
91.5.1-0ubuntu191.6.0-191.6.0-291.7.0-291.10.0-0ubuntu1
 None known
thunderbird
Ubuntu:22.04:LTS
 before 1:115.4.1+build1-0ubuntu0.22.04.1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 20 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.11:102.15.1+build1-0ubuntu0.22.04.11:115.3.1+build1-0ubuntu0.22.04.2
1:115.4.1+build1-0ubuntu0.22.04.1
mozjs102
Ubuntu:24.04:LTS
 All versions, plus listed versions
102.15.1-1102.15.1-3ubuntu2
 None known
thunderbird
Ubuntu:24.04:LTS
 before 1:115.4.1+build1-0ubuntu1, plus listed versions
1:115.3.1+build1-0ubuntu1
1:115.4.1+build1-0ubuntu1
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 8 CVEs
 before 115.4.1-1.1
115.4.1-1.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 119.0-1.1
119.0-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5727 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published October 24, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.83%, the 57th percentile. Fixed in firefox 119.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,683 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open