Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/343080?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "type": "apk", "namespace": "alpine", "name": "firefox-esr", "version": "115.2.0-r0", "qualifiers": { "arch": "riscv64", "distroversion": "v3.22", "reponame": "community" }, "subpath": "", "is_vulnerable": false, "next_non_vulnerable_version": "115.2.1-r0", "latest_non_vulnerable_version": "115.6.0-r0", "affected_by_vulnerabilities": [], "fixing_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/984?format=api", "vulnerability_id": "VCID-5618-75cz-qqdm", "summary": "Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory on mac OS. *This bug only affects Firefox on macOS. Other operating systems are unaffected.*", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4582.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4582.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4582", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00657", "scoring_system": "epss", "scoring_elements": "0.71457", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00657", "scoring_system": "epss", "scoring_elements": "0.71447", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00657", "scoring_system": "epss", "scoring_elements": "0.71424", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00657", "scoring_system": "epss", "scoring_elements": "0.7144", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00657", "scoring_system": "epss", "scoring_elements": "0.71463", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4582" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236081", "reference_id": "2236081", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236081" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T20:00:26Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T20:00:26Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T20:00:26Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1773874", "reference_id": "show_bug.cgi?id=1773874", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T20:00:26Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1773874" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4582" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5618-75cz-qqdm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/981?format=api", "vulnerability_id": "VCID-5atb-6j95-j3he", "summary": "A website could have obscured the full screen notification by using a URL with a scheme handled by an external program, such as a mailto URL. This could have led to user confusion and possible spoofing attacks.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4053.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4053.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4053", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34629", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34559", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34593", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34613", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00145", "scoring_system": "epss", "scoring_elements": "0.34578", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4053" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236078", "reference_id": "2236078", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236078" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-29", "reference_id": "mfsa2023-29", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-29" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-29/", "reference_id": "mfsa2023-29", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:37:53Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-29/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:37:53Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:37:53Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839079", "reference_id": "show_bug.cgi?id=1839079", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:37:53Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839079" }, { "reference_url": "https://usn.ubuntu.com/6267-1/", "reference_id": "USN-6267-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6267-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4053" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5atb-6j95-j3he" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/975?format=api", "vulnerability_id": "VCID-98uu-meuf-7ffk", "summary": "When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4574.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4574.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4574", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33447", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33399", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33378", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33411", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33431", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4574" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236072", "reference_id": "2236072", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236072" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:07:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-35/", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:07:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:07:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-37/", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:07:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:07:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846688", "reference_id": "show_bug.cgi?id=1846688", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:07:09Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846688" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6368-1/", "reference_id": "USN-6368-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6368-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4574" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-98uu-meuf-7ffk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/985?format=api", "vulnerability_id": "VCID-ct4h-je9a-dbbp", "summary": "When checking if the Browsing Context had been discarded in HttpBaseChannel, if the load group was not available then it was assumed to have already been discarded which was not always the case for private channels after the private session had ended.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4583.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4583.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4583", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34739", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34707", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34685", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34719", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00146", "scoring_system": "epss", "scoring_elements": "0.34755", "published_at": "2026-06-06T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4583" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236082", "reference_id": "2236082", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236082" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-19T19:09:13Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-19T19:09:13Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-19T19:09:13Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1842030", "reference_id": "show_bug.cgi?id=1842030", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-19T19:09:13Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1842030" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6405-1/", "reference_id": "USN-6405-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6405-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4583" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ct4h-je9a-dbbp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/977?format=api", "vulnerability_id": "VCID-hcyz-2j9s-3yff", "summary": "On Windows, an integer overflow could occur in RecordedSourceSurfaceCreation which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape.*This bug only affects Firefox on Windows. Other operating systems are unaffected.*", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4576.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4576.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4576", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46675", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46638", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46628", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46655", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00235", "scoring_system": "epss", "scoring_elements": "0.46672", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4576" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236074", "reference_id": "2236074", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236074" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T14:57:46Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-35/", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T14:57:46Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T14:57:46Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-37/", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T14:57:46Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T14:57:46Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846694", "reference_id": "show_bug.cgi?id=1846694", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T14:57:46Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846694" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4576" ], "risk_score": null, "exploitability": null, "weighted_severity": null, "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-hcyz-2j9s-3yff" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/980?format=api", "vulnerability_id": "VCID-jb51-1ghy-wuap", "summary": "When calling JS::CheckRegExpSyntax a Syntax Error could have been set which would end in calling convertToRuntimeErrorAndClear. A path in the function could attempt to allocate memory when none is available which would have caused a newly created Out of Memory exception to be mishandled as a Syntax Error.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4578.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4578.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4578", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28911", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.2884", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28875", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28947", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.0011", "scoring_system": "epss", "scoring_elements": "0.28851", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4578" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236077", "reference_id": "2236077", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236077" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:09Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839007", "reference_id": "show_bug.cgi?id=1839007", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:09Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1839007" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6405-1/", "reference_id": "USN-6405-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6405-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4578" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-jb51-1ghy-wuap" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/982?format=api", "vulnerability_id": "VCID-k6j7-k9vz-wkem", "summary": "Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4580.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4580.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4580", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21401", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21292", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21356", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.21415", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00069", "scoring_system": "epss", "scoring_elements": "0.213", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4580" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236079", "reference_id": "2236079", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236079" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:01:48Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:01:48Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:01:48Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843046", "reference_id": "show_bug.cgi?id=1843046", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:01:48Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843046" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6405-1/", "reference_id": "USN-6405-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6405-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4580" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-k6j7-k9vz-wkem" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/974?format=api", "vulnerability_id": "VCID-m73p-bjtb-yqhp", "summary": "When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4573.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4573.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4573", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33447", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33399", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33378", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33411", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33431", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236071", "reference_id": "2236071", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236071" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:08:18Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-35/", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:08:18Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:08:18Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-37/", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:08:18Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:08:18Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846687", "reference_id": "show_bug.cgi?id=1846687", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:08:18Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846687" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6368-1/", "reference_id": "USN-6368-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6368-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4573" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-m73p-bjtb-yqhp" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/979?format=api", "vulnerability_id": "VCID-q6pc-v3k6-97eh", "summary": "A website could have obscured the full screen notification by using the file open dialog. This could have led to user confusion and possible spoofing attacks.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4051.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4051.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4051", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00168", "scoring_system": "epss", "scoring_elements": "0.37688", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00168", "scoring_system": "epss", "scoring_elements": "0.37618", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00168", "scoring_system": "epss", "scoring_elements": "0.37657", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00168", "scoring_system": "epss", "scoring_elements": "0.37685", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00168", "scoring_system": "epss", "scoring_elements": "0.37631", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4051" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236076", "reference_id": "2236076", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236076" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-29", "reference_id": "mfsa2023-29", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-29" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-29/", "reference_id": "mfsa2023-29", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:40:45Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-29/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:40:45Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:40:45Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821884", "reference_id": "show_bug.cgi?id=1821884", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2024-10-22T14:40:45Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1821884" }, { "reference_url": "https://usn.ubuntu.com/6267-1/", "reference_id": "USN-6267-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6267-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4051" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-q6pc-v3k6-97eh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/976?format=api", "vulnerability_id": "VCID-s4p4-a6ak-gucx", "summary": "When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4575.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4575.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4575", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33447", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33399", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33378", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33411", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00137", "scoring_system": "epss", "scoring_elements": "0.33431", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236073", "reference_id": "2236073", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236073" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:05:40Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-35/", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:05:40Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:05:40Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-37/", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:05:40Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:05:40Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846689", "reference_id": "show_bug.cgi?id=1846689", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T15:05:40Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1846689" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6368-1/", "reference_id": "USN-6368-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6368-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4575" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s4p4-a6ak-gucx" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/978?format=api", "vulnerability_id": "VCID-v6dc-59nf-4qcc", "summary": "When UpdateRegExpStatics attempted to access initialStringHeap it could already have been garbage collected prior to entering the function, which could potentially have led to an exploitable crash.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4577.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4577.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4577", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27553", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27464", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27514", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27603", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00102", "scoring_system": "epss", "scoring_elements": "0.27471", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4577" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236075", "reference_id": "2236075", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236075" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:33Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1847397", "reference_id": "show_bug.cgi?id=1847397", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-19T20:02:33Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1847397" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6405-1/", "reference_id": "USN-6405-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6405-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4577" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-v6dc-59nf-4qcc" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/986?format=api", "vulnerability_id": "VCID-waj1-tkbu-p3gm", "summary": "Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4584.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4584.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4584", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52865", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52903", "published_at": "2026-06-05T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52909", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00292", "scoring_system": "epss", "scoring_elements": "0.52889", "published_at": "2026-06-09T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4584" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236084", "reference_id": "2236084", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236084" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6368-1/", "reference_id": "USN-6368-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6368-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4584" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-waj1-tkbu-p3gm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/983?format=api", "vulnerability_id": "VCID-wn9a-4tjj-1ugh", "summary": "Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4581.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4581.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4581", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0016", "scoring_system": "epss", "scoring_elements": "0.36717", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.0016", "scoring_system": "epss", "scoring_elements": "0.36655", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.0016", "scoring_system": "epss", "scoring_elements": "0.36645", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.0016", "scoring_system": "epss", "scoring_elements": "0.36681", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.0016", "scoring_system": "epss", "scoring_elements": "0.36709", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4573" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4574" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4575" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4581" }, { "reference_url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584", "reference_id": "", "reference_type": "", "scores": [], "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4584" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236080", "reference_id": "2236080", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236080" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T16:02:47Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-35" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-35/", "reference_id": "mfsa2023-35", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T16:02:47Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-35/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T16:02:47Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-37" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-37/", "reference_id": "mfsa2023-37", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T16:02:47Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-37/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T16:02:47Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843758", "reference_id": "show_bug.cgi?id=1843758", "reference_type": "", "scores": [ { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-26T16:02:47Z/" } ], "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1843758" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6368-1/", "reference_id": "USN-6368-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6368-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4581" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wn9a-4tjj-1ugh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/987?format=api", "vulnerability_id": "VCID-y8y1-he3x-87cp", "summary": "Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.", "references": [ { "reference_url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4585.json", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], "url": "https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-4585.json" }, { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4585", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00203", "scoring_system": "epss", "scoring_elements": "0.42353", "published_at": "2026-06-09T12:55:00Z" }, { "value": "0.00203", "scoring_system": "epss", "scoring_elements": "0.42344", "published_at": "2026-06-08T12:55:00Z" }, { "value": "0.00203", "scoring_system": "epss", "scoring_elements": "0.42378", "published_at": "2026-06-07T12:55:00Z" }, { "value": "0.00203", "scoring_system": "epss", "scoring_elements": "0.42404", "published_at": "2026-06-06T12:55:00Z" }, { "value": "0.00203", "scoring_system": "epss", "scoring_elements": "0.42393", "published_at": "2026-06-05T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2023-4585" }, { "reference_url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236086", "reference_id": "2236086", "reference_type": "", "scores": [], "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2236086" }, { "reference_url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1751583%2C1841082%2C1847904%2C1848999", "reference_id": "buglist.cgi?bug_id=1751583%2C1841082%2C1847904%2C1848999", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T19:08:38Z/" } ], "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1751583%2C1841082%2C1847904%2C1848999" }, { "reference_url": "https://security.gentoo.org/glsa/202402-25", "reference_id": "GLSA-202402-25", "reference_type": "", "scores": [], "url": "https://security.gentoo.org/glsa/202402-25" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-34" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-34/", "reference_id": "mfsa2023-34", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T19:08:38Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-34/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-36" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-36/", "reference_id": "mfsa2023-36", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T19:08:38Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-36/" }, { "reference_url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "high", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.mozilla.org/en-US/security/advisories/mfsa2023-38" }, { "reference_url": "https://www.mozilla.org/security/advisories/mfsa2023-38/", "reference_id": "mfsa2023-38", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "Track", "scoring_system": "ssvc", "scoring_elements": "SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-09-19T19:08:38Z/" } ], "url": "https://www.mozilla.org/security/advisories/mfsa2023-38/" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4945", "reference_id": "RHSA-2023:4945", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4945" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4946", "reference_id": "RHSA-2023:4946", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4946" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4947", "reference_id": "RHSA-2023:4947", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4947" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4948", "reference_id": "RHSA-2023:4948", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4948" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4949", "reference_id": "RHSA-2023:4949", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4949" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4950", "reference_id": "RHSA-2023:4950", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4950" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4951", "reference_id": "RHSA-2023:4951", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4951" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4952", "reference_id": "RHSA-2023:4952", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4952" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4954", "reference_id": "RHSA-2023:4954", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4954" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4955", "reference_id": "RHSA-2023:4955", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4955" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4956", "reference_id": "RHSA-2023:4956", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4956" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4957", "reference_id": "RHSA-2023:4957", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4957" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4958", "reference_id": "RHSA-2023:4958", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4958" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:4959", "reference_id": "RHSA-2023:4959", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:4959" }, { "reference_url": "https://access.redhat.com/errata/RHSA-2023:5019", "reference_id": "RHSA-2023:5019", "reference_type": "", "scores": [], "url": "https://access.redhat.com/errata/RHSA-2023:5019" }, { "reference_url": "https://usn.ubuntu.com/6320-1/", "reference_id": "USN-6320-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6320-1/" }, { "reference_url": "https://usn.ubuntu.com/6405-1/", "reference_id": "USN-6405-1", "reference_type": "", "scores": [], "url": "https://usn.ubuntu.com/6405-1/" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/343080?format=api", "purl": "pkg:apk/alpine/firefox-esr@115.2.0-r0?arch=riscv64&distroversion=v3.22&reponame=community", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" } ], "aliases": [ "CVE-2023-4585" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-y8y1-he3x-87cp" } ], "risk_score": null, "resource_url": "http://public2.vulnerablecode.io/packages/pkg:apk/alpine/firefox-esr@115.2.0-r0%3Farch=riscv64&distroversion=v3.22&reponame=community" }