Lucene search
HistoryJun 02, 2023 - 5:15 p.m.
CVE-2023-25735
cross-compartment wrappers
scripted proxy
use-after-free
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.7%
Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments to be stored in the main compartment resulting in a use-after-free after unwrapping the proxy. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.
Affected configurations
Node
mozillafirefoxRange<110.0
ORmozillafirefox_esrRange<102.8
ORmozillathunderbirdRange<102.8
Related
debiancve
debiancve
CVE-2023-25735
2023-06-02 17:15:11
redhatcve
redhatcve
CVE-2023-25735
2023-02-16 09:30:38
cve
cve
CVE-2023-25735
2023-06-02 17:15:11
veracode
veracode
Denial Of Service (DoS)
2023-02-25 20:49:58
cvelist
cvelist
CVE-2023-25735
2023-06-02 00:00:00
prion
prion
Design/Logic Flaw
2023-06-02 17:15:00
ubuntucve
ubuntucve
CVE-2023-25735
2023-02-15 00:00:00
alpinelinux
alpinelinux
CVE-2023-25735
2023-06-02 17:15:11
nessus
nessus
EulerOS Virtualization 2.9.0 : mozjs60 (EulerOS-SA-2024-1473)
2024-03-21 00:00:00
EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2024-1201)
2024-02-08 00:00:00
EulerOS 2.0 SP9 : mozjs60 (EulerOS-SA-2024-1181)
2024-02-08 00:00:00
openvas
openvas
Huawei EulerOS: Security Advisory for mozjs60 (EulerOS-SA-2024-1473)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for mozjs60 (EulerOS-SA-2024-1458)
2024-03-21 00:00:00
Huawei EulerOS: Security Advisory for mozjs60 (EulerOS-SA-2024-1181)
2024-02-09 00:00:00
ubuntu
ubuntu
SpiderMonkey vulnerabilities
2023-05-30 00:00:00
Thunderbird vulnerabilities
2023-03-13 00:00:00
Firefox vulnerabilities
2023-02-20 00:00:00
osv
osv
mozjs102 vulnerabilities
2023-05-30 14:32:35
firefox-esr - security update
2023-02-15 00:00:00
Important: firefox security update
2023-02-22 01:09:41
mageia
mageia
Updated thunderbird packages fix security vulnerability
2023-02-21 00:25:36
Updated firefox packages fix security vulnerability
2023-02-21 00:25:36
redhat
redhat
(RHSA-2023:0812) Important: firefox security update
2023-02-20 08:00:12
(RHSA-2023:0807) Important: Mozilla Firefox security update
2023-02-20 07:59:02
(RHSA-2023:0806) Important: Mozilla Firefox security update
2023-02-20 07:58:58
debian
debian
[SECURITY] [DSA 5350-1] firefox-esr security update
2023-02-15 22:15:01
[SECURITY] [DLA 3319-1] firefox-esr security update
2023-02-16 11:30:55
[SECURITY] [DLA 3324-1] thunderbird security update
2023-02-20 08:15:05
oraclelinux
oraclelinux
firefox security update
2023-02-20 00:00:00
firefox security update
2023-02-20 00:00:00
firefox security update
2023-02-21 00:00:00
almalinux
almalinux
Important: firefox security update
2023-02-20 00:00:00
Important: thunderbird security update
2023-02-20 00:00:00
Important: firefox security update
2023-02-20 00:00:00
centos
centos
firefox security update
2023-02-22 17:50:01
thunderbird security update
2023-02-22 17:48:54
redos
redos
ROS-20230315-01
2023-03-15 00:00:00
amazon
amazon
Important: thunderbird
2023-03-02 22:36:00
Important: thunderbird
2023-03-02 22:36:00
kaspersky
kaspersky
KLA20239 Multiple vulnerabilities in Mozilla Thunderbird
2023-02-15 00:00:00
KLA20238 Multiple vulnerabilities in Mozilla Firefox ESR
2023-02-14 00:00:00
KLA20237 Multiple vulnerabilities in Mozilla Firefox
2023-02-14 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-02-15 03:05:52
[slackware-security] mozilla-thunderbird
2023-02-16 22:10:42
rocky
rocky
firefox security update
2023-02-22 01:09:41
firefox security update
2023-02-22 01:08:53
thunderbird security update
2023-02-22 01:08:53
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 102.8.0-alt1
2023-03-15 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1
2023-03-10 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 102.8 — Mozilla
2023-02-15 00:00:00
Security Vulnerabilities fixed in Firefox ESR 102.8 — Mozilla
2023-02-14 00:00:00
Security Vulnerabilities fixed in Firefox 110 — Mozilla
2023-02-14 00:00:00
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-30 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
ibm
ibm
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8.2 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
54.7%
Related for NVD:CVE-2023-25735