CVE-2023-37211

—

CVSS 3.1

8.8 high

EPSS

<1%p53

Published

Jul 5, 2023 (Jul 5, 2023)

Modified

Jun 17, 2026

Description

Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

Vendors: mozilla debian
Products: firefox, firefox esr, thunderbird, debian linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news2 stories

It’s a hot 0-day summer for Apple, Google, and Microsoft security fixes

Ars Technica · SecurityAug 1, 17:55 UTC · Aug 1, 2023Exploit / PoC CVE-2023-37450 CVE-2023-36884 CVE-2023-32046+18 CVEs

High-Severity Flaws Fixed in Firefox 115 Update

Infosecurity MagazineJul 5, 17:00 UTC · Jul 5, 2023Vulnerability CVE-2023-37201 CVE-2023-37202 CVE-2023-37211+10 CVEs