Multiple vulnerabilities in Mozilla Firefox

Description

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information, spoof user interface.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in JIT compiler can be exploited to cause denial of service.
2. Memory safety vulnerability can be exploited to execute arbitrary code.
3. Information disclosure vulnerability in ServiceWorker can be exploited to obtain sensitive information.
4. Denial of service vulnerability in Worklets can be exploited to cause denial of service.
5. Information disclosure vulnerability in Web extension can be exploited to obtain sensitive information.
6. Security UI vulnerability in Cross-origin iframe can be exploited to spoof user interface.
7. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.
8. Security UI vulnerability in Fullscreen Notification can be exploited to spoof user interface.
9. Information disclosure vulnerability in Save As dialog on Windows can be exploited to obtain sensitive information.
10. Information disclosure vulnerability in Permissions system can be exploited to obtain sensitive information.
11. Out of bounds vulnerability can be exploited to cause denial of service.

Original advisories

• MFSA2023-09

Related products

• Mozilla-Firefox

CVE list

• CVE-2023-25751
  high
• CVE-2023-28176
  critical
• CVE-2023-25750
  warning
• CVE-2023-28162
  critical
• CVE-2023-28177
  critical
• CVE-2023-28160
  high
• CVE-2023-28164
  high
• CVE-2023-25749
  warning
• CVE-2023-28159
  warning
• CVE-2023-28163
  high
• CVE-2023-28161
  critical
• CVE-2023-25752
  high
• CVE-2023-25748
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com