{"url":"http://public2.vulnerablecode.io/api/packages/337732?format=json","purl":"pkg:rpm/redhat/firefox@102.10.0-1?arch=el8_2","type":"rpm","namespace":"redhat","name":"firefox","version":"102.10.0-1","qualifiers":{"arch":"el8_2"},"subpath":"","is_vulnerable":true,"next_non_vulnerable_version":null,"latest_non_vulnerable_version":null,"affected_by_vulnerabilities":[{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15022?format=json","vulnerability_id":"VCID-487h-jn1c-a3am","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1999.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1999.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-1999","reference_id":"","reference_type":"","scores":[{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.58144","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00353","scoring_system":"epss","scoring_elements":"0.58031","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035371","reference_id":"1035371","reference_type":"","scores":[],"url":"https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035371"},{"reference_url":"https://security.gentoo.org/glsa/202309-05","reference_id":"202309-05","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T19:14:09Z/"}],"url":"https://security.gentoo.org/glsa/202309-05"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186102","reference_id":"2186102","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186102"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1999","reference_id":"CVE-2023-1999","reference_type":"","scores":[],"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-1999"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://chromium.googlesource.com/webm/libwebp","reference_id":"libwebp","reference_type":"","scores":[{"value":"5.3","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T19:14:09Z/"}],"url":"https://chromium.googlesource.com/webm/libwebp"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2072","reference_id":"RHSA-2023:2072","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2072"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2073","reference_id":"RHSA-2023:2073","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2073"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2075","reference_id":"RHSA-2023:2075","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2075"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2076","reference_id":"RHSA-2023:2076","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2076"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2077","reference_id":"RHSA-2023:2077","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2077"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2078","reference_id":"RHSA-2023:2078","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2078"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2084","reference_id":"RHSA-2023:2084","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2084"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:2085","reference_id":"RHSA-2023:2085","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:2085"},{"reference_url":"https://usn.ubuntu.com/6078-1/","reference_id":"USN-6078-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6078-1/"},{"reference_url":"https://usn.ubuntu.com/6078-2/","reference_id":"USN-6078-2","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6078-2/"}],"fixed_packages":[],"aliases":["CVE-2023-1999"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-487h-jn1c-a3am"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140605?format=json","vulnerability_id":"VCID-a3gp-6ktz-aqf2","summary":"A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29533.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29533.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29533","reference_id":"","reference_type":"","scores":[{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34694","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00144","scoring_system":"epss","scoring_elements":"0.34517","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186101","reference_id":"2186101","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186101"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:57:06Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:57:06Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:57:06Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1798219","reference_id":"show_bug.cgi?id=1798219","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:57:06Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1798219"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1814597","reference_id":"show_bug.cgi?id=1814597","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:57:06Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1814597"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29533"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a3gp-6ktz-aqf2"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140833?format=json","vulnerability_id":"VCID-csev-gzre-t3gh","summary":"Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29550.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29550.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29550","reference_id":"","reference_type":"","scores":[{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41915","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.4175","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29550"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186111","reference_id":"2186111","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186111"},{"reference_url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828","reference_id":"buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-10T19:20:01Z/"}],"url":"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1720594%2C1812498%2C1814217%2C1818357%2C1751945%2C1818762%2C1819493%2C1820389%2C1820602%2C1821448%2C1822413%2C1824828"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-10T19:20:01Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-10T19:20:01Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-10T19:20:01Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"},{"reference_url":"https://usn.ubuntu.com/6120-1/","reference_id":"USN-6120-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6120-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29550"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-csev-gzre-t3gh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/15013?format=json","vulnerability_id":"VCID-g9dk-kcp7-q7c1","summary":"","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1945.json","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-1945.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-1945","reference_id":"","reference_type":"","scores":[{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28449","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28252","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"6.1","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186109","reference_id":"2186109","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186109"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T16:55:03Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T16:55:03Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1777588","reference_id":"show_bug.cgi?id=1777588","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T16:55:03Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1777588"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"}],"fixed_packages":[],"aliases":["CVE-2023-1945"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-g9dk-kcp7-q7c1"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140486?format=json","vulnerability_id":"VCID-jtnv-8pdn-m7bh","summary":"A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29548.json","reference_id":"","reference_type":"","scores":[{"value":"3.4","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29548.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29548","reference_id":"","reference_type":"","scores":[{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28378","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00106","scoring_system":"epss","scoring_elements":"0.28182","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186110","reference_id":"2186110","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186110"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:16:05Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:16:05Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:16:05Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1822754","reference_id":"show_bug.cgi?id=1822754","reference_type":"","scores":[{"value":"6.5","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:16:05Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1822754"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"},{"reference_url":"https://usn.ubuntu.com/6120-1/","reference_id":"USN-6120-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6120-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29548"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-jtnv-8pdn-m7bh"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140511?format=json","vulnerability_id":"VCID-pgfx-nj3x-b7bd","summary":"Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29535.json","reference_id":"","reference_type":"","scores":[{"value":"7.5","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29535.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29535","reference_id":"","reference_type":"","scores":[{"value":"0.00338","scoring_system":"epss","scoring_elements":"0.571","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00338","scoring_system":"epss","scoring_elements":"0.56981","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186103","reference_id":"2186103","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186103"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:51:21Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:51:21Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:51:21Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1820543","reference_id":"show_bug.cgi?id=1820543","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-09T15:51:21Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1820543"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"},{"reference_url":"https://usn.ubuntu.com/6120-1/","reference_id":"USN-6120-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6120-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29535"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-pgfx-nj3x-b7bd"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140873?format=json","vulnerability_id":"VCID-q92s-9xja-43fx","summary":"When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29539.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29539.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29539","reference_id":"","reference_type":"","scores":[{"value":"0.00221","scoring_system":"epss","scoring_elements":"0.45016","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00221","scoring_system":"epss","scoring_elements":"0.44866","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186105","reference_id":"2186105","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186105"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:43:44Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:43:44Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:43:44Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1784348","reference_id":"show_bug.cgi?id=1784348","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:43:44Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1784348"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29539"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-q92s-9xja-43fx"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140593?format=json","vulnerability_id":"VCID-t7zm-9zeh-g3gq","summary":"Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29541.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29541.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29541","reference_id":"","reference_type":"","scores":[{"value":"0.00208","scoring_system":"epss","scoring_elements":"0.43401","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00208","scoring_system":"epss","scoring_elements":"0.43245","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186106","reference_id":"2186106","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186106"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:08:52Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:08:52Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:08:52Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1810191","reference_id":"show_bug.cgi?id=1810191","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-01-10T19:08:52Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1810191"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29541"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-t7zm-9zeh-g3gq"},{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/140848?format=json","vulnerability_id":"VCID-u7xy-htj7-cfcz","summary":"An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.","references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29536.json","reference_id":"","reference_type":"","scores":[{"value":"8.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-29536.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29536","reference_id":"","reference_type":"","scores":[{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.41915","published_at":"2026-06-12T12:55:00Z"},{"value":"0.00198","scoring_system":"epss","scoring_elements":"0.4175","published_at":"2026-06-11T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0547"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1945"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1999"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28427"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29479"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29533"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29535"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29536"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29541"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29548"},{"reference_url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550","reference_id":"","reference_type":"","scores":[],"url":"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29550"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186104","reference_id":"2186104","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186104"},{"reference_url":"https://security.gentoo.org/glsa/202305-35","reference_id":"GLSA-202305-35","reference_type":"","scores":[],"url":"https://security.gentoo.org/glsa/202305-35"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-13"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-13/","reference_id":"mfsa2023-13","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:50:03Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-13/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-14"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-14/","reference_id":"mfsa2023-14","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:50:03Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-14/"},{"reference_url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"high","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-15"},{"reference_url":"https://www.mozilla.org/security/advisories/mfsa2023-15/","reference_id":"mfsa2023-15","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:50:03Z/"}],"url":"https://www.mozilla.org/security/advisories/mfsa2023-15/"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1785","reference_id":"RHSA-2023:1785","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1785"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1786","reference_id":"RHSA-2023:1786","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1786"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1787","reference_id":"RHSA-2023:1787","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1787"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1788","reference_id":"RHSA-2023:1788","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1788"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1789","reference_id":"RHSA-2023:1789","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1789"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1790","reference_id":"RHSA-2023:1790","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1790"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1791","reference_id":"RHSA-2023:1791","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1791"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1792","reference_id":"RHSA-2023:1792","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1792"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1802","reference_id":"RHSA-2023:1802","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1802"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1803","reference_id":"RHSA-2023:1803","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1803"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1804","reference_id":"RHSA-2023:1804","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1804"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1805","reference_id":"RHSA-2023:1805","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1805"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1806","reference_id":"RHSA-2023:1806","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1806"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1809","reference_id":"RHSA-2023:1809","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1809"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1810","reference_id":"RHSA-2023:1810","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1810"},{"reference_url":"https://access.redhat.com/errata/RHSA-2023:1811","reference_id":"RHSA-2023:1811","reference_type":"","scores":[],"url":"https://access.redhat.com/errata/RHSA-2023:1811"},{"reference_url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1821959","reference_id":"show_bug.cgi?id=1821959","reference_type":"","scores":[{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-01-09T15:50:03Z/"}],"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1821959"},{"reference_url":"https://usn.ubuntu.com/6010-1/","reference_id":"USN-6010-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6010-1/"},{"reference_url":"https://usn.ubuntu.com/6015-1/","reference_id":"USN-6015-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6015-1/"},{"reference_url":"https://usn.ubuntu.com/6120-1/","reference_id":"USN-6120-1","reference_type":"","scores":[],"url":"https://usn.ubuntu.com/6120-1/"}],"fixed_packages":[],"aliases":["CVE-2023-29536"],"risk_score":4.0,"exploitability":"0.5","weighted_severity":"8.0","resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-u7xy-htj7-cfcz"}],"fixing_vulnerabilities":[],"risk_score":"4.0","resource_url":"http://public2.vulnerablecode.io/packages/pkg:rpm/redhat/firefox@102.10.0-1%3Farch=el8_2"}