CVE-2023-4056
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk54th percentile - higher than 54% of all known CVEs
Summary
Memory safety bugs are present in Firefox and Thunderbird that may lead to memory corruption. Some of these bugs could potentially be exploited to run arbitrary code.
Risk Assessment
This vulnerability poses serious security risks, allowing attackers to execute remote code on user systems. Organizations should be aware of the risks associated with using outdated software versions.
Recommendation
It is recommended to update Firefox and Thunderbird to the latest versions to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
Memory safety bugs present in Firefox 115, Firefox ESR 115.0, Firefox ESR 102.13, Thunderbird 115.0, and Thunderbird 102.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.