CVE-2023-5727

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1847180
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-45/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-46/
• https://www.mozilla.org/en-US/security/advisories/mfsa2023-47/
• https://www.mozilla.org/security/advisories/mfsa2023-45/
• https://www.mozilla.org/security/advisories/mfsa2023-46/
• https://www.mozilla.org/security/advisories/mfsa2023-47/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2023-47
• MFSA2023-46
• MFSA2023-45

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-5721
• CVE-2023-5732
• CVE-2023-5724
• CVE-2023-5725
• CVE-2023-5726
• CVE-2023-5727
• CVE-2023-5728
• CVE-2023-5730
• CVE-2023-5722
• CVE-2023-5723
• CVE-2023-5729
• CVE-2023-5731

Frequently Asked Questions

• What is CVE-2023-5727?

  CVE-2023-5727 is a vulnerability that allows the execution of commands on a user's computer without the warning prompt when downloading .msix, .msixbundle, .appx, and .appxbundle files in Firefox ESR versions 115.4 and earlier, as well as Firefox versions 119 and earlier.

• How does CVE-2023-5727 affect Windows operating systems?

  CVE-2023-5727 affects Windows operating systems by not presenting the executable file warning when downloading certain file types, potentially allowing malicious commands to run on a user's computer.

• Which versions of Firefox are affected by CVE-2023-5727?

  Firefox ESR versions 115.4 and earlier, as well as Firefox versions 119 and earlier, are affected by CVE-2023-5727.

• What is the severity of CVE-2023-5727?

  CVE-2023-5727 has a severity rating of medium with a CVSS score of 4.0.

• How can I fix CVE-2023-5727?

  To fix CVE-2023-5727, update your Firefox browser to the latest version available, which has addressed the vulnerability.