Firefox, Firefox ESR, Thunderbird vulnerabilities
5 known CVE vulnerabilities in Firefox, Firefox ESR, Thunderbird, translated and rated.
- CVE-2023-4057Critical
Memory safety bugs exist in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs may lead to memory corruption, potentially allowing arbitrary code execution.
- CVE-2023-34416Critical
Memory safety bugs exist in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs may lead to memory corruption, potentially allowing arbitrary code execution.
- CVE-2023-3600High
CVE-2023-3600 affects the worker lifecycle, where a use-after-free condition could have occurred, potentially leading to an exploitable crash. This affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.
- CVE-2023-37211High
Memory safety bugs are present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and could potentially be exploited to run arbitrary code.
- CVE-2023-37201High
CVE-2023-37201 allows an attacker to trigger a use-after-free condition when creating a WebRTC connection over HTTPS. This affects Firefox versions < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS