Veille CVE

Août 2023

4 CVE sur 13

Critique 3 Élevée 6 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes
  1. CVE-2023-4052 6.5 Moyenne

    Mozilla Firefox · Mozilla Firefox ESR · Mozilla Thunderbird

    The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.

  2. CVE-2023-4049 5.9 Moyenne

    Mozilla Firefox · Mozilla Firefox ESR · Debian debian linux

    Race conditions in reference counting code were found through code inspection. These could have resulted in potentially exploitable use-after-free vulnerabilities. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

  3. CVE-2023-4045 5.3 Moyenne

    mozilla firefox · Mozilla Firefox ESR · Debian debian linux

    Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.

  4. CVE-2023-23548 6.1 Moyenne

    Checkmk GmbH Checkmk · Checkmk checkmk

    Reflected XSS in business intelligence in Checkmk <2.2.0p8, <2.1.0p32, <2.0.0p38, <=1.6.0p30.