CVE-2023-6862

概要

参考情報

• bugzilla.mozilla.org/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2023/12/msg00020.html · Mailing List
• lists.debian.org/debian-lts-announce/2023/12/msg00021.html · Mailing List
• security.gentoo.org/glsa/202401-10 · Third Party Advisory
• debian.org/security/2023/dsa-5581 · Third Party Advisory
• debian.org/security/2023/dsa-5582 · Third Party Advisory
• mozilla.org/security/advisories/mfsa2023-54 · Vendor Advisory
• mozilla.org/security/advisories/mfsa2023-55 · Vendor Advisory

firefox esr のその他の脆弱性

• CVE-2024-9397中 6.1A missing delay in directory upload UI could have made it possible for an attacker to trick a user into granting permission via clickjacking…
• CVE-2024-9394高 7.5An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://devtools` origin. This co…
• CVE-2024-9393高 7.5An attacker could, via a specially crafted multipart response, execute arbitrary JavaScript under the `resource://pdf.js` origin. This coul…
• CVE-2024-8387緊急 9.8Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption…
• CVE-2024-8386中 6.1If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform …