CVE-2023-29532

🗓️ 19 Jun 2023 10:15:09Reported by [email protected]Type

Mozilla Maintenance Service allows unsigned update file to be applied from a malicious SMB server, affecting Firefox and Thunderbird on Windows

Reporter	Title	Published	Views	Family All 78
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
AlpineLinux	CVE-2023-29532	19 Jun 202309:58	–	alpinelinux
BDU FSTEC	The vulnerability in the Mozilla Maintenance service affects browsers such as Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird. This vulnerability allows an attacker to gain access to read, modify, or delete data.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve allowing an unauthorized pointer to be freed, enabling a hacker to execute arbitrary code or cause a service failure.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the `window.open` method of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to conceal full-screen notifications and perform spoofing attacks.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Garbage Collector component in Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird allows a hacker to execute arbitrary code or cause a service failure.	19 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve improper handling of file names that end with .desktop. This allows attackers to bypass security restrictions and execute arbitrary commands.	22 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve improper handling of the new line in the file name. This allows attackers to bypass security restrictions and execute arbitrary code.	22 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve operations beyond the buffer boundaries in memory. This allows attackers to cause system failures or execute arbitrary code.	22 May 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of Mozilla Firefox, Focus for Android, Mozilla Firefox ESR, and the email client Thunderbird involve insufficient protection of sensitive data, allowing attackers to gain unauthorized access to protected information.	22 May 202300:00	–	bdu_fstec

NVD

Node

mozilla firefoxRange<112.0

mozilla firefox_esrRange<102.10

mozilla thunderbirdRange<102.10

AND

microsoft windowsMatch-

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2023-14/
mozilla	www.mozilla.org/security/advisories/mfsa2023-13/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2023-15/

17 Jun 2026 05:50Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.15.5

EPSS0.00185