Lucene search

K
cvelistMozillaCVELIST:CVE-2023-37209
HistoryJul 05, 2023 - 9:05 a.m.

CVE-2023-37209

2023-07-0509:05:08
mozilla
www.cve.org
use-after-free
vulnerability
firefox

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%

A use-after-free condition existed in NotifyOnHistoryReload where a LoadingSessionHistoryEntry object was freed and a reference to that object remained. This resulted in a potentially exploitable condition when the reference to that object was later reused. This vulnerability affects Firefox < 115.

CNA Affected

[
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "115",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.3%