説明
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to spoof user interface, bypass security restrictions, execute arbitrary code.
Below is a complete list of vulnerabilities:
- Security UI vulnerability in Fullscreen notification can be exploited to spoof user interface.
- Security bypass vulnerability in libusrsctp can be exploited to bypass security restrictions.
- Security vulnerability in WebWorker can be exploited to bypass security restrictions.
- Code execution vulnerability in GTK drag and drop can be exploited remotely to execute arbitrary code.
- Code execution vulnerability in Devtools can be exploited remotely to execute arbitrary code.
- Memory safety vulnerability can be exploited to execute arbitrary code.
- Security vulnerability in format directive can be exploited to bypass security restrictions.
- Security UI vulnerability in cross-origin iframe can be exploited to spoof user interface.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2022-46877 warning
- CVE-2022-46871 critical
- CVE-2023-23602 high
- CVE-2023-23598 high
- CVE-2023-23599 high
- CVE-2023-23605 critical
- CVE-2023-23603 high
- CVE-2023-23601 high
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！