CVE-2023-32216

CRITICAL 9.8CVE-2023-32216 · Published 19/06/2023 · updated 17/06/2026

In short

CVE-2023-32216 is a CRITICAL (CVSS 9.8) vulnerability affecting firefox (mozilla).
Chance of exploitation in the next 30 days (EPSS): 0.78%, higher than 56.1% of all vulnerabilities.
Fix: update to 113.0 or later.

Package	Affected versions	Patched versions
firefox mozilla	`< 113.0`	`113.0`

Description

Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113.

References

bugzilla.mozilla.org/buglist.cgi · Broken Link
security.gentoo.org/glsa/202401-10
mozilla.org/security/advisories/mfsa2023-16 · Vendor Advisory

More vulnerabilities in firefox

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

firefox

mozilla

< 113.0

113.0

Description

More vulnerabilities in firefox

See all →