Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

Microsoft VP9 Video ExtensionsHeap buffer overflow in WebP

Risk 95
Severity
8.8
Exploited
Zeroday
Buffer Overflow, Path Traversal
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2023-4863 Heap buffer overflow in WebP

1 / 8
Source: Microsoft
First published (updated )
CVE-2023-4863

redhat/firefoxMemory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2

Risk 81
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Last updated 24 July 2024

1 / 4
Source: Ubuntu
First published (updated )
CVE-2023-4584

redhat/firefoxXLL file extensions were downloadable without warnings

Risk 23
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm.

1 / 4
Source: Mozilla
First published (updated )
CVE-2023-4581

Mozilla ThunderbirdInteger Overflow in RecordedSourceSurfaceCreation

Risk 51
Severity
8.6
Buffer Overflow, Integer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

On Windows, an integer overflow could occur in RecordedSourceSurfaceCreation which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

1 / 2
First published (updated )
CVE-2023-4576

redhat/firefoxMemory corruption in IPC FilePickerShownCallback

Risk 39
Severity
6.5
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 4
Source: Ubuntu
First published (updated )
CVE-2023-4575

redhat/firefoxMemory corruption in IPC ColorPickerShownCallback

Risk 39
Severity
6.5
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 4
Source: Ubuntu
First published (updated )
CVE-2023-4574

redhat/firefoxMemory corruption in IPC CanvasTranslator

Risk 39
Severity
6.5
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Last updated 24 July 2024

1 / 4
Source: Ubuntu
First published (updated )
CVE-2023-4573

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203