Beveiligingsadvies

CVE-2023-5168

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-27 14:12:58

Laatst bijgewerkt 2025-05-01 20:13:54

Toegewezen door mozilla

CVSS-score 9.8

Status PUBLISHED

Beschrijving

A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

← Alle CVE's bekijken Bekijk op cve.org ↗