Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. (CVE-2023-4047, CVE-2023-4048, CVE-2023-4049, CVE-2023-4051, CVE-2023-4053, CVE-2023-4055, CVE-2023-4056, CVE-2023-4057, CVE-2023-4058)
Max Vlasov discovered that Firefox Offscreen Canvas did not properly track cross-origin tainting. An attacker could potentially exploit this issue to access image data from another site in violation of same-origin policy. (CVE-2023-4045)
Alexander Guryanov discovered that Firefox did not properly update the value of a global variable in WASM JIT analysis in some circumstances. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-4046)
Mark Brand discovered that Firefox did not properly validate the size of an untrusted input stream. An attacker could potentially exploit this issue to cause a denial of service. (CVE-2023-4050)
{ "availability": "No subscription required", "binaries": [ { "binary_name": "firefox", "binary_version": "116.0+build2-0ubuntu0.20.04.2" }, { "binary_name": "firefox-dev", "binary_version": "116.0+build2-0ubuntu0.20.04.2" }, { "binary_name": "firefox-geckodriver", "binary_version": "116.0+build2-0ubuntu0.20.04.2" }, { "binary_name": "firefox-mozsymbols", "binary_version": "116.0+build2-0ubuntu0.20.04.2" } ] }