CVE-2023-4048
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
Risk Assessment
Organizations may be exposed to application crashes, potentially leading to data loss or service downtime.
Recommendation
It is recommended to update Firefox to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Firefox, Firefox ESR
See all- CVE-2023-4049Medium
Race conditions in reference counting code were found, which could lead to potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
- CVE-2023-4047High
A bug in popup notifications delay calculation could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
Original NVD description (English source)
An out-of-bounds read could have led to an exploitable crash when parsing HTML with DOMParser in low memory situations. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.