CVE Catalog

CVE-2023-4058

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.63%

45th percentile - higher than 45% of all known CVEs

Summary

Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.

Risk Assessment

This vulnerability may lead to the execution of malicious code, posing a serious threat to the security of users and organizations using the outdated version of the browser.

Recommendation

It is recommended to update Firefox to version 116 or newer to mitigate this vulnerability.

Original NVD description (English source)

Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS