Mozilla Firefox ESR

• CVE-2023-4581 Unrated XLL file extensions were downloadable without warnings 0.6%
• CVE-2023-4580 Unrated Push notifications saved to disk unencrypted 0.4%
• CVE-2023-4578 Unrated Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception 0.6%
• CVE-2023-4577 Unrated Memory corruption in JIT UpdateRegExpStatics 0.7%
• CVE-2023-4576 Unrated Integer Overflow in RecordedSourceSurfaceCreation 0.8%
• CVE-2023-4575 Unrated Memory corruption in IPC FilePickerShownCallback 0.7%
• CVE-2023-4574 Unrated Memory corruption in IPC ColorPickerShownCallback 0.7%
• CVE-2023-4573 Unrated Memory corruption in IPC CanvasTranslator 0.6%
• CVE-2023-4057 Unrated Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could 0.9%
• CVE-2023-4056 Unrated Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that 0.9%
• CVE-2023-4055 Unrated When the number of cookies per domain was exceeded in `document.cookie`, the actual cookie jar sent to the host was no longer consistent with expected cookie jar state. This could have caused requests 0.7%
• CVE-2023-4054 Unrated When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulne 0.2%
• CVE-2023-4053 Unrated Full screen notification obscured by external program 0.8%
• CVE-2023-4052 Unrated The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling u 0.7%
• CVE-2023-4051 Unrated Full screen notification obscured by file open dialog 0.7%
• CVE-2023-4050 Unrated In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This resulted in a potentially exploitable crash which could have led to a sandbox escape. This vulnera 12.6%
• CVE-2023-4049 Unrated Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox < 0.6%
• CVE-2023-4048 Unrated An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR 0.9%
• CVE-2023-4047 Unrated A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, an 0.6%
• CVE-2023-4046 Unrated In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process. 1.1%
• CVE-2023-4045 Unrated Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox 0.6%
• CVE-2023-3600 Unrated Use-after-free in workers 0.6%
• CVE-2023-37211 Unrated Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these coul 0.8%
• CVE-2023-37208 Unrated When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. 0.2%
• CVE-2023-37207 Unrated A website could have obscured the fullscreen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing 0.7%
• CVE-2023-37202 Unrated Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free. This vulnerability affects Fi 0.8%
• CVE-2023-37201 Unrated An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13. 0.8%
• CVE-2023-34416 Unrated Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these coul 0.9%
• CVE-2023-34414 Unrated The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks that exploit human response time delays. If 0.9%
• CVE-2023-29545 Medium 6.5 Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the context of the current user. *This bug o 0.6%
• CVE-2023-29542 Critical 9.8 A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental exe 0.9%
• CVE-2023-29532 Medium 5.5 A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB server. The update file can be replaced af 0.2%
• CVE-2023-29531 Critical 9.8 An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug only affects Firefox and Thunderbird for mac 1.0%
• CVE-2023-32214 Unrated Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerab 0.9%
• CVE-2023-28164 Medium 6.5 Dragging a URL from a cross-origin iframe that was removed during the drag could have led to user confusion and website spoofing attacks. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, 0.3%
• CVE-2023-28163 Medium 6.5 When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable names, Windows would have resolved those in the context of the current user. <br>* 0.8%
• CVE-2023-28176 High 8.8 Memory safety bugs present in Firefox 110 and Firefox ESR 102.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited 0.7%
• CVE-2023-28162 High 8.8 While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111 0.7%
• CVE-2023-29550 High 8.8 Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited 0.7%
• CVE-2023-1945 Medium 6.5 Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10. 0.6%
• CVE-2023-29533 Unrated A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> ca 0.6%
• CVE-2023-23601 Unrated URL being dragged from cross-origin iframe into same tab triggers navigation 0.3%
• CVE-2023-23603 Medium 6.5 Calls to console.log allowed bypassing Content Security Policy via format directive 0.6%
• CVE-2023-23598 Unrated Arbitrary file read from GTK drag and drop on Linux 0.6%
• CVE-2023-23605 High 8.8 Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 0.7%
• CVE-2023-23599 Unrated Malicious command could be hidden in devtools output on Windows 0.6%
• CVE-2023-23602 Medium 6.5 Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers 0.6%
• CVE-2023-32215 Unrated Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 0.8%
• CVE-2023-32206 Unrated An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. 0.7%
• CVE-2023-32213 Unrated When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. 0.8%