Skip to contentMozilla Firefox vulnerabilities
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreAddress bar spoofing via bidirectional charactersCVE-2023-5732Fix available6.5 Medium
- mozilla firefoxMemory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory...CVE-2023-5731Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of...CVE-2023-5730Fix available9.8 Critical
- mozilla firefoxA malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt....CVE-2023-5729Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDuring garbage collection extra operations were performed on a object that should not be. This...CVE-2023-5728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreThe executable file warning was not presented when downloading .msix, .msixbundle, .appx, and ...CVE-2023-5727Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA website could have obscured the full screen notification by using the file open dialog. This...CVE-2023-5726Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreA malicious installed WebExtension could open arbitrary URLs, which under the right circumstance...CVE-2023-5725Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreDrivers are not always robust to extremely large draw calls and in some cases this scenario could...CVE-2023-5724Fix available7.5 High
- mozilla firefoxAn attacker with temporary script access to a site could have set a cookie containing invalid...CVE-2023-5723Fix available5.3 Medium
- mozilla firefoxUsing iterative requests an attacker was able to learn the size of an opaque response, as well as...CVE-2023-5722Fix available5.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreIt was possible for certain browser prompts and dialogs to be activated or dismissed...CVE-2023-5721Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreNSS was susceptible to a timing side-channel attack when performing RSA decryption. This attack...CVE-2023-5388Fix available6.5 Medium
- google chrome, libvpx, apple ipados +9 more +11 moreElectron affected by libvpx's heap buffer overflow in vp8 encodingCVE-2023-5217In KEVPublic exploitFix availableEPSS 49.0%8.8 High
- mozilla firefoxDuring process shutdown, it was possible that an `ImageBitmap` was created that would later be...CVE-2023-5175Fix available9.8 Critical
- mozilla firefoxIn a non-standard configuration of Firefox, an integer overflow could have occurred based on...CVE-2023-5173Fix available7.5 High
- mozilla firefoxA hashtable in the Ion Engine could have been mutated while there was a live interior reference,...CVE-2023-5172Fix available9.8 Critical
- mozilla firefoxIn canvas rendering, a compromised content process could have caused a surface to change...CVE-2023-5170Fix available7.4 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreMemory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of...CVE-2023-5176Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreIf Windows failed to duplicate a handle during process creation, the sandbox code may have...CVE-2023-5174Fix available9.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreDuring Ion compilation, a Garbage Collection could have resulted in a use-after-free condition,...CVE-2023-5171Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreA compromised content process could have provided malicious data in a `PathRecording` resulting...CVE-2023-5169Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreA compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in...CVE-2023-51689.8 Critical
- google chrome, libwebp, bandisoft honeyview +10 more +12 moreDuplicate Advisory: Bundled libwebp in Pillow vulnerableCVE-2023-4863In KEVPublic exploitFix availableEPSS 100.0%8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBuffer Overflow in WebGL glGetProgramivCVE-2023-4582Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreInteger Overflow in RecordedSourceSurfaceCreationCVE-2023-4576Fix available8.6 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2CVE-2023-4585Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2CVE-2023-4584Fix available8.8 High
- mozilla firefox, firefox esr, thunderbird +2 moreBrowsing Context potentially not cleared when closing Private WindowCVE-2023-4583Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreXLL file extensions were downloadable without warningsCVE-2023-4581Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +2 morePush notifications saved to disk unencryptedCVE-2023-4580Fix available6.5 Medium
- mozilla firefoxPersisted search terms were formatted as URLsCVE-2023-4579Fix available3.1 Low
- mozilla firefox, firefox esr, thunderbird +2 moreError reporting methods in SpiderMonkey could have triggered an Out of Memory ExceptionCVE-2023-4578Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in JIT UpdateRegExpStaticsCVE-2023-4577Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC FilePickerShownCallbackCVE-2023-4575Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC ColorPickerShownCallbackCVE-2023-4574Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreMemory corruption in IPC CanvasTranslatorCVE-2023-4573Fix available6.5 Medium
- mozilla firefoxA potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was...CVE-2022-468848.8 High
- mozilla firefoxMemory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory...CVE-2023-40589.8 Critical
- mozilla firefox, firefox esr, thunderbird +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of...CVE-2023-4057Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreMemory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115...CVE-2023-4056Fix available9.8 Critical
- mozilla firefox, firefox esr, debian linux +2 moreWhen the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar...CVE-2023-4055Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +2 moreWhen opening appref-ms files, Firefox did not warn the user that these files may contain...CVE-2023-4054Fix available5.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreThe Firefox updater created a directory writable by non-privileged users. When uninstalling...CVE-2023-4052Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by external programCVE-2023-4053Fix available6.5 Medium
- mozilla firefox, firefox esr, thunderbird +2 moreFull screen notification obscured by file open dialogCVE-2023-4051Fix available7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreIn some cases, an untrusted input stream was copied to a stack buffer without checking its size....CVE-2023-4050Fix availableEPSS 12.6%7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreRace conditions in reference counting code were found through code inspection. These could have...CVE-2023-4049Fix available5.9 Medium
- mozilla firefox, firefox esr, debian linux +2 moreAn out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in...CVE-2023-4048Fix available7.5 High
- mozilla firefox, firefox esr, debian linux +2 moreA bug in popup notifications delay calculation could have made it possible for an attacker to...CVE-2023-4047Fix available8.8 High
- Show moreLoading…