Lucene search
HistoryJun 02, 2023 - 5:15 p.m.
CVE-2023-28177
firefox
memory corruption
arbitrary code
vulnerability
memory safety
exploitation
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Memory safety bugs present in Firefox 110. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 111.
Affected configurations
Node
mozillafirefoxRange<111.0
Related
cvelist
cvelist
CVE-2023-28177
2023-06-02 00:00:00
debiancve
debiancve
CVE-2023-28177
2023-06-02 17:15:12
cve
cve
CVE-2023-28177
2023-06-02 17:15:12
ubuntucve
ubuntucve
CVE-2023-28177
2023-03-15 00:00:00
prion
prion
Memory corruption
2023-06-02 17:15:00
veracode
veracode
Denial Of Service (DoS)
2023-03-24 15:41:19
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5954-1)
2023-03-15 00:00:00
SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2023:0728-1)
2023-03-15 00:00:00
Fedora 38 : firefox (2023-ed41d3a922)
2023-03-22 00:00:00
openvas
openvas
Mozilla Firefox Security Advisories (MFSA2023-07, MFSA2023-11) - Mac OS X
2023-05-11 00:00:00
Mozilla Firefox Security Advisory (MFSA2023-09) - Linux
2023-03-14 00:00:00
Ubuntu: Security Advisory (USN-5954-2)
2023-03-28 00:00:00
osv
osv
firefox regressions
2023-03-27 03:05:28
firefox vulnerabilities
2023-03-15 11:30:03
ubuntu
ubuntu
Firefox regressions
2023-03-27 00:00:00
Firefox vulnerabilities
2023-03-15 00:00:00
kaspersky
kaspersky
KLA48551 Multiple vulnerabilities in Mozilla Firefox
2023-03-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 111 — Mozilla
2023-03-14 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.002
Percentile
60.9%
Related for NVD:CVE-2023-28177