CVE Catalog

CVE-2023-34417

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.78%

51th percentile - higher than 51% of all known CVEs

Summary

Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Risk Assessment

This vulnerability may lead to the execution of arbitrary code, posing a significant threat to the security of systems using Firefox versions below 114.

Recommendation

It is recommended to update Firefox to version 114 or newer to mitigate this vulnerability.

Original NVD description (English source)

Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 114.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS