Firefox < 116, Firefox ESR < 102.14, Firefox ESR < 115.1 vulnerabilities
4 known CVE vulnerabilities in Firefox < 116, Firefox ESR < 102.14, Firefox ESR < 115.1, translated and rated.
- CVE-2023-4050High
In some cases, an untrusted input stream was copied to a stack buffer without checking its size. This could lead to a crash that potentially allows for a sandbox escape.
- CVE-2023-4055High
CVE-2023-4055 affects the Firefox browser, where exceeding the number of cookies per domain leads to inconsistencies in the sent cookies. As a result, some requests may be sent with missing cookies.
- CVE-2023-4046Medium
In some circumstances, a stale value could have been used for a global variable in WASM JIT analysis. This resulted in incorrect compilation and a potentially exploitable crash in the content process.
- CVE-2023-4045Medium
CVE-2023-4045 concerns improper tracking of cross-origin tainting in Offscreen Canvas, which could allow unauthorized access to image data from other sites, violating same-origin policy.