Mozilla Firefox 安全漏洞

🗓️ 17 Apr 2023 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 2 Views

Firefox vulnerability before 112 lets local attacker bypass write-lock and install unsigned updates.

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
AlpineLinux	CVE-2023-29532	19 Jun 202309:58	–	alpinelinux
BDU FSTEC	The vulnerability in the Mozilla Maintenance service affects browsers such as Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird. This vulnerability allows an attacker to gain access to read, modify, or delete data.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve allowing an unauthorized pointer to be freed, enabling a hacker to execute arbitrary code or cause a service failure.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `window.open` method of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to conceal full-screen notifications and perform spoofing attacks.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Garbage Collector component in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve improper handling of file names that end with .desktop. This allows attackers to bypass security restrictions and execute arbitrary commands.	22 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve improper handling of the new line in the file name. This allows attackers to bypass security restrictions and execute arbitrary code.	22 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve operations beyond the buffer boundaries in memory. This allows attackers to cause system failures or execute arbitrary code.	22 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.	22 May 202300:00	–	bdu_fstec

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2023-15/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2023-13/
mozilla	www.mozilla.org/security/advisories/mfsa2023-14/
auscert	www.auscert.org.au/bulletins/ESB-2023.2191
cxsecurity	www.cxsecurity.com/cveshow/CVE-2023-29532/

24 May 2026 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 3.15.5

EPSS0.00085

SSVC

firefox vulnerability local attacker write lock bypass unsigned updates malicious server