{
  "fix": "Mozilla Firefox ESR (en-US) 115.4.0",
  "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-115.4.0",
  "summary": "Mozilla Firefox ESR (en-US) 115.4.0, released October 17, 2023, fixes 141 CVEs in Mozilla Firefox ESR (en-US). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Mozilla Firefox ESR (en-US) is 153.7.0, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Mozilla Firefox ESR (en-US) 115.4.0",
  "released": "2023-10-17T00:00:00Z",
  "priority": "Urgent",
  "priorityTier": 2,
  "priorityReason": "Closes CVE-2023-29542, rated Critical",
  "supported": true,
  "cveCount": 141,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.0146,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "Mozilla Firefox ESR (en-US)",
      "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-en-us",
      "fixedVersion": "115.4.0",
      "latestVersion": "153.7.0",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Mozilla Firefox ESR (en-US)",
    "latestVersion": "153.7.0",
    "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-firefox-esr-en-us"
  },
  "cves": [
    {
      "cveId": "CVE-2023-29542",
      "url": "https://patchblox.com/security/cve/CVE-2023-29542",
      "title": "Mozilla Firefox and 4 others: A newline in a filename could have been used to bypass the file extension security mechanisms that replace\u2026",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.0094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34416",
      "url": "https://patchblox.com/security/cve/CVE-2023-34416",
      "title": "Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.0093,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-40959",
      "url": "https://patchblox.com/security/cve/CVE-2022-40959",
      "title": "Mozilla Thunderbird and 4 others: Insecure Storage of Sensitive Information",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0146,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-40962",
      "url": "https://patchblox.com/security/cve/CVE-2022-40962",
      "title": "Mozilla Thunderbird and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.0143,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-40957",
      "url": "https://patchblox.com/security/cve/CVE-2022-40957",
      "title": "Mozilla Thunderbird and 4 others: Improper Handling of Inconsistent Structural Elements",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01241,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-40958",
      "url": "https://patchblox.com/security/cve/CVE-2022-40958",
      "title": "Mozilla Thunderbird and 4 others: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01177,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-40960",
      "url": "https://patchblox.com/security/cve/CVE-2022-40960",
      "title": "Mozilla Thunderbird and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.01077,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45406",
      "url": "https://patchblox.com/security/cve/CVE-2022-45406",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.01073,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46882",
      "url": "https://patchblox.com/security/cve/CVE-2022-46882",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00982,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46874",
      "url": "https://patchblox.com/security/cve/CVE-2022-46874",
      "title": "Mozilla Firefox and 4 others: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00974,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46871",
      "url": "https://patchblox.com/security/cve/CVE-2022-46871",
      "title": "Mozilla Firefox and 2 others: Use of Unmaintained Third Party Components",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00968,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-40956",
      "url": "https://patchblox.com/security/cve/CVE-2022-40956",
      "title": "Mozilla Thunderbird and 4 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00942,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38478",
      "url": "https://patchblox.com/security/cve/CVE-2022-38478",
      "title": "Mozilla Thunderbird and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38477",
      "url": "https://patchblox.com/security/cve/CVE-2022-38477",
      "title": "Mozilla Thunderbird and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00927,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32214",
      "url": "https://patchblox.com/security/cve/CVE-2023-32214",
      "title": "Mozilla Firefox and 4 others: Protocol handlers \u0060ms-cxh\u0060 and \u0060ms-cxh-full\u0060 could have been leveraged to trigger a denial of service.",
      "priority": "High",
      "cvss": 7.5,
      "epss": 0.00918,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34414",
      "url": "https://patchblox.com/security/cve/CVE-2023-34414",
      "title": "Mozilla Firefox and 4 others: The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses\u2026",
      "priority": "High",
      "severity": "low",
      "cvss": 9.8,
      "epss": 0.00897,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-42928",
      "url": "https://patchblox.com/security/cve/CVE-2022-42928",
      "title": "Mozilla Firefox and 4 others: NULL Pointer Dereference",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00892,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45410",
      "url": "https://patchblox.com/security/cve/CVE-2022-45410",
      "title": "Mozilla Firefox and 4 others: Missing Authorization",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00824,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0767",
      "url": "https://patchblox.com/security/cve/CVE-2023-0767",
      "title": "Mozilla Firefox and 4 others: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00817,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-2505",
      "url": "https://patchblox.com/security/cve/CVE-2022-2505",
      "title": "Mozilla Thunderbird and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00798,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45409",
      "url": "https://patchblox.com/security/cve/CVE-2022-45409",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00788,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-42929",
      "url": "https://patchblox.com/security/cve/CVE-2022-42929",
      "title": "Mozilla Firefox and 4 others: Uncontrolled Resource Consumption",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00785,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32216",
      "url": "https://patchblox.com/security/cve/CVE-2023-32216",
      "title": "Mozilla Firefox and 2 others: Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.0078,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34417",
      "url": "https://patchblox.com/security/cve/CVE-2023-34417",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.0078,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45418",
      "url": "https://patchblox.com/security/cve/CVE-2022-45418",
      "title": "Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00777,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25734",
      "url": "https://patchblox.com/security/cve/CVE-2023-25734",
      "title": "Mozilla Firefox and 4 others: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
      "priority": "High",
      "cvss": 8.1,
      "epss": 0.00775,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46878",
      "url": "https://patchblox.com/security/cve/CVE-2022-46878",
      "title": "Mozilla Firefox and 4 others: Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0077,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46881",
      "url": "https://patchblox.com/security/cve/CVE-2022-46881",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0077,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-42932",
      "url": "https://patchblox.com/security/cve/CVE-2022-42932",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00766,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32209",
      "url": "https://patchblox.com/security/cve/CVE-2023-32209",
      "title": "Mozilla Firefox and 2 others: A maliciously crafted favicon could have led to an out of memory crash.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00761,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46877",
      "url": "https://patchblox.com/security/cve/CVE-2022-46877",
      "title": "Mozilla Firefox and 2 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00758,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37201",
      "url": "https://patchblox.com/security/cve/CVE-2023-37201",
      "title": "Mozilla Firefox and 4 others: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00755,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37202",
      "url": "https://patchblox.com/security/cve/CVE-2023-37202",
      "title": "Mozilla Firefox and 4 others: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00755,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32213",
      "url": "https://patchblox.com/security/cve/CVE-2023-32213",
      "title": "Mozilla Firefox and 4 others: When reading a file, an uninitialized value could have been used as read limit.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32215",
      "url": "https://patchblox.com/security/cve/CVE-2023-32215",
      "title": "Mozilla Firefox and 4 others: Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst,\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37211",
      "url": "https://patchblox.com/security/cve/CVE-2023-37211",
      "title": "Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45421",
      "url": "https://patchblox.com/security/cve/CVE-2022-45421",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00749,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46873",
      "url": "https://patchblox.com/security/cve/CVE-2022-46873",
      "title": "Mozilla Firefox and 2 others: Improper Neutralization of Special Elements in Output Used by a Downstream Component (\u0027Injection\u0027)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00749,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29535",
      "url": "https://patchblox.com/security/cve/CVE-2023-29535",
      "title": "Mozilla Firefox and 4 others: Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00747,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29541",
      "url": "https://patchblox.com/security/cve/CVE-2023-29541",
      "title": "Mozilla Firefox and 4 others: Improper Encoding or Escaping of Output",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00743,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45403",
      "url": "https://patchblox.com/security/cve/CVE-2022-45403",
      "title": "Mozilla Firefox and 4 others: Observable Discrepancy",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00742,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36319",
      "url": "https://patchblox.com/security/cve/CVE-2022-36319",
      "title": "Mozilla Thunderbird and 4 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.0074,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37207",
      "url": "https://patchblox.com/security/cve/CVE-2023-37207",
      "title": "Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00739,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25732",
      "url": "https://patchblox.com/security/cve/CVE-2023-25732",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29539",
      "url": "https://patchblox.com/security/cve/CVE-2023-29539",
      "title": "Mozilla Firefox and 4 others: When handling the filename directive in the Content-Disposition header, the filename would be truncated\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38473",
      "url": "https://patchblox.com/security/cve/CVE-2022-38473",
      "title": "Mozilla Thunderbird and 4 others: Improper Preservation of Permissions",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00736,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32207",
      "url": "https://patchblox.com/security/cve/CVE-2023-32207",
      "title": "Mozilla Firefox and 4 others: Authentication Bypass by Spoofing",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00731,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28176",
      "url": "https://patchblox.com/security/cve/CVE-2023-28176",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00719,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45416",
      "url": "https://patchblox.com/security/cve/CVE-2022-45416",
      "title": "Mozilla Firefox and 4 others: Observable Discrepancy",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00717,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25735",
      "url": "https://patchblox.com/security/cve/CVE-2023-25735",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29550",
      "url": "https://patchblox.com/security/cve/CVE-2023-29550",
      "title": "Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 111 and Firefox ESR 102.9.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00708,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45408",
      "url": "https://patchblox.com/security/cve/CVE-2022-45408",
      "title": "Mozilla Firefox and 4 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00707,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36320",
      "url": "https://patchblox.com/security/cve/CVE-2022-36320",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00705,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32206",
      "url": "https://patchblox.com/security/cve/CVE-2023-32206",
      "title": "Mozilla Firefox and 4 others: An out-of-bound read could have led to a crash in the RLBox Expat driver.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00703,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23605",
      "url": "https://patchblox.com/security/cve/CVE-2023-23605",
      "title": "Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25737",
      "url": "https://patchblox.com/security/cve/CVE-2023-25737",
      "title": "Mozilla Firefox and 4 others: Incorrect Type Conversion or Cast",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28162",
      "url": "https://patchblox.com/security/cve/CVE-2023-28162",
      "title": "Mozilla Firefox and 4 others: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29536",
      "url": "https://patchblox.com/security/cve/CVE-2023-29536",
      "title": "Mozilla Firefox and 4 others: An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46880",
      "url": "https://patchblox.com/security/cve/CVE-2022-46880",
      "title": "Mozilla Thunderbird and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00696,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25751",
      "url": "https://patchblox.com/security/cve/CVE-2023-25751",
      "title": "Mozilla Firefox and 4 others: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0069,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25736",
      "url": "https://patchblox.com/security/cve/CVE-2023-25736",
      "title": "Mozilla Firefox and 2 others: An invalid downcast from \u0060nsHTMLDocument\u0060 to \u0060nsIContent\u0060 could have lead to undefined behavior.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 9.8,
      "epss": 0.00685,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46879",
      "url": "https://patchblox.com/security/cve/CVE-2022-46879",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00682,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25739",
      "url": "https://patchblox.com/security/cve/CVE-2023-25739",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00682,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45405",
      "url": "https://patchblox.com/security/cve/CVE-2022-45405",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25729",
      "url": "https://patchblox.com/security/cve/CVE-2023-25729",
      "title": "Mozilla Firefox and 4 others: Incorrect Authorization",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25744",
      "url": "https://patchblox.com/security/cve/CVE-2023-25744",
      "title": "Mozilla Firefox and 2 others: Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7.",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00673,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25728",
      "url": "https://patchblox.com/security/cve/CVE-2023-25728",
      "title": "Mozilla Firefox and 4 others: Observable Discrepancy",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00672,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25745",
      "url": "https://patchblox.com/security/cve/CVE-2023-25745",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00668,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45407",
      "url": "https://patchblox.com/security/cve/CVE-2022-45407",
      "title": "Mozilla Firefox and 2 others: Use After Free",
      "priority": "High",
      "cvss": 7.5,
      "epss": 0.00651,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45404",
      "url": "https://patchblox.com/security/cve/CVE-2022-45404",
      "title": "Mozilla Firefox and 4 others: User Interface (UI) Misrepresentation of Critical Information",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.0065,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25743",
      "url": "https://patchblox.com/security/cve/CVE-2023-25743",
      "title": "Mozilla Firefox and 2 others: A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00649,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25742",
      "url": "https://patchblox.com/security/cve/CVE-2023-25742",
      "title": "Mozilla Firefox and 4 others: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.00648,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23598",
      "url": "https://patchblox.com/security/cve/CVE-2023-23598",
      "title": "Arbitrary file read from GTK drag and drop on Linux",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23603",
      "url": "https://patchblox.com/security/cve/CVE-2023-23603",
      "title": "Calls to console.log allowed bypassing Content Security Policy via format directive",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37212",
      "url": "https://patchblox.com/security/cve/CVE-2023-37212",
      "title": "Mozilla Firefox and 2 others: Memory safety bugs present in Firefox 114.",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00638,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3600",
      "url": "https://patchblox.com/security/cve/CVE-2023-3600",
      "title": "Use-after-free in workers",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32205",
      "url": "https://patchblox.com/security/cve/CVE-2023-32205",
      "title": "Mozilla Firefox and 4 others: In multiple cases browser prompts could have been obscured by popups controlled by content.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00631,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28161",
      "url": "https://patchblox.com/security/cve/CVE-2023-28161",
      "title": "Mozilla Firefox and 2 others: Improper Preservation of Permissions",
      "priority": "High",
      "severity": "Low",
      "cvss": 8.8,
      "epss": 0.00624,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25733",
      "url": "https://patchblox.com/security/cve/CVE-2023-25733",
      "title": "Mozilla Firefox and 2 others: Unchecked Return Value",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00622,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45411",
      "url": "https://patchblox.com/security/cve/CVE-2022-45411",
      "title": "Mozilla Firefox and 4 others: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00613,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25752",
      "url": "https://patchblox.com/security/cve/CVE-2023-25752",
      "title": "Mozilla Firefox and 4 others: When accessing throttled streams, the count of available bytes needed to be checked in the calling function\u2026",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 7.5,
      "epss": 0.0061,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45420",
      "url": "https://patchblox.com/security/cve/CVE-2022-45420",
      "title": "Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 9.8,
      "epss": 0.00608,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46883",
      "url": "https://patchblox.com/security/cve/CVE-2022-46883",
      "title": "Mozilla Firefox and 2 others: Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00606,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23599",
      "url": "https://patchblox.com/security/cve/CVE-2023-23599",
      "title": "Malicious command could be hidden in devtools output on Windows",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00601,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23602",
      "url": "https://patchblox.com/security/cve/CVE-2023-23602",
      "title": "Content Security Policy wasn\u0027t being correctly applied to WebSockets in WebWorkers",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00601,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37209",
      "url": "https://patchblox.com/security/cve/CVE-2023-37209",
      "title": "Mozilla Firefox and 2 others: A use-after-free condition existed in \u0060NotifyOnHistoryReload\u0060 where a \u0060LoadingSessionHistoryEntry\u0060 object\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00594,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29533",
      "url": "https://patchblox.com/security/cve/CVE-2023-29533",
      "title": "Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a combination of \u003Ccode\u003Ewindow.open\u003C/code\u003E,\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00569,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25731",
      "url": "https://patchblox.com/security/cve/CVE-2023-25731",
      "title": "Mozilla Firefox and 2 others: Improper Validation of Specified Quantity in Input",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00557,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29537",
      "url": "https://patchblox.com/security/cve/CVE-2023-29537",
      "title": "Mozilla Firefox and 2 others: Multiple race conditions in the font initialization could have led to memory corruption and execution\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.5,
      "epss": 0.00556,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25730",
      "url": "https://patchblox.com/security/cve/CVE-2023-25730",
      "title": "Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28177",
      "url": "https://patchblox.com/security/cve/CVE-2023-28177",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00545,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46885",
      "url": "https://patchblox.com/security/cve/CVE-2022-46885",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00539,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36318",
      "url": "https://patchblox.com/security/cve/CVE-2022-36318",
      "title": "Mozilla Thunderbird and 4 others: Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.0053,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29543",
      "url": "https://patchblox.com/security/cve/CVE-2023-29543",
      "title": "Mozilla Firefox and 2 others: Improper Encoding or Escaping of Output",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29551",
      "url": "https://patchblox.com/security/cve/CVE-2023-29551",
      "title": "Mozilla Firefox and 2 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00526,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25740",
      "url": "https://patchblox.com/security/cve/CVE-2023-25740",
      "title": "Mozilla Firefox and 2 others: Insufficiently Protected Credentials",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00523,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23606",
      "url": "https://patchblox.com/security/cve/CVE-2023-23606",
      "title": "Memory safety bugs fixed in Firefox 109",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00521,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-46884",
      "url": "https://patchblox.com/security/cve/CVE-2022-46884",
      "title": "Mozilla Firefox and 2 others: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at\u2026",
      "priority": "High",
      "cvss": 8.8,
      "epss": 0.00477,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-42927",
      "url": "https://patchblox.com/security/cve/CVE-2022-42927",
      "title": "Mozilla Firefox and 4 others: Origin Validation Error",
      "priority": "High",
      "severity": "Medium",
      "cvss": 8.8,
      "epss": 0.00445,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-42930",
      "url": "https://patchblox.com/security/cve/CVE-2022-42930",
      "title": "Mozilla Firefox and 2 others: Concurrent Execution using Shared Resource with Improper Synchronization (\u0027Race Condition\u0027)",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.1,
      "epss": 0.0042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38472",
      "url": "https://patchblox.com/security/cve/CVE-2022-38472",
      "title": "Mozilla Thunderbird and 4 others: Origin Validation Error",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00388,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23601",
      "url": "https://patchblox.com/security/cve/CVE-2023-23601",
      "title": "URL being dragged from cross-origin iframe into same tab triggers navigation",
      "priority": "High",
      "severity": "IMPORTANT",
      "cvss": 8.8,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28164",
      "url": "https://patchblox.com/security/cve/CVE-2023-28164",
      "title": "Mozilla Firefox and 4 others: Origin Validation Error",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37203",
      "url": "https://patchblox.com/security/cve/CVE-2023-37203",
      "title": "Mozilla Firefox and 2 others: Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed\u2026",
      "priority": "High",
      "severity": "Medium",
      "cvss": 7.8,
      "epss": 0.00253,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45415",
      "url": "https://patchblox.com/security/cve/CVE-2022-45415",
      "title": "Mozilla Firefox and 2 others: Unrestricted Upload of File with Dangerous Type",
      "priority": "High",
      "cvss": 7.8,
      "epss": 0.0024,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37208",
      "url": "https://patchblox.com/security/cve/CVE-2023-37208",
      "title": "Mozilla Firefox and 4 others: Unrestricted Upload of File with Dangerous Type",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28163",
      "url": "https://patchblox.com/security/cve/CVE-2023-28163",
      "title": "Mozilla Firefox and 4 others: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00798,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25741",
      "url": "https://patchblox.com/security/cve/CVE-2023-25741",
      "title": "Mozilla Firefox and 2 others: Observable Discrepancy",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00767,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32211",
      "url": "https://patchblox.com/security/cve/CVE-2023-32211",
      "title": "Mozilla Firefox and 4 others: A type checking bug would have led to invalid code being compiled.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00738,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37206",
      "url": "https://patchblox.com/security/cve/CVE-2023-37206",
      "title": "Mozilla Firefox and 2 others: Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00715,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29548",
      "url": "https://patchblox.com/security/cve/CVE-2023-29548",
      "title": "Mozilla Firefox and 4 others: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32212",
      "url": "https://patchblox.com/security/cve/CVE-2023-32212",
      "title": "Mozilla Firefox and 4 others: An attacker could have positioned a \u0060datalist\u0060 element to obscure the address bar.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00647,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25738",
      "url": "https://patchblox.com/security/cve/CVE-2023-25738",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Read",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00635,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29545",
      "url": "https://patchblox.com/security/cve/CVE-2023-29545",
      "title": "Mozilla Firefox and 4 others: Similar to CVE-2023-28163, this time when choosing \u0027Save Link As\u0027, suggested filenames containing environment\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3482",
      "url": "https://patchblox.com/security/cve/CVE-2023-3482",
      "title": "Mozilla Firefox and 2 others: When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32210",
      "url": "https://patchblox.com/security/cve/CVE-2023-32210",
      "title": "Mozilla Firefox and 2 others: Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00538,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32208",
      "url": "https://patchblox.com/security/cve/CVE-2023-32208",
      "title": "Mozilla Firefox and 2 others: Service workers could reveal script base URL due to dynamic \u0060import()\u0060.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.3,
      "epss": 0.00524,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37204",
      "url": "https://patchblox.com/security/cve/CVE-2023-37204",
      "title": "Mozilla Firefox and 2 others: A website could have obscured the fullscreen notification by using an option element by introducing lag\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00515,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37205",
      "url": "https://patchblox.com/security/cve/CVE-2023-37205",
      "title": "Mozilla Firefox and 2 others: The use of RTL Arabic characters in the address bar may have allowed for URL spoofing.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00515,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28160",
      "url": "https://patchblox.com/security/cve/CVE-2023-28160",
      "title": "Mozilla Firefox and 2 others: Direct Request (\u0027Forced Browsing\u0027)",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00508,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29547",
      "url": "https://patchblox.com/security/cve/CVE-2023-29547",
      "title": "Mozilla Firefox and 2 others: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00473,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23604",
      "url": "https://patchblox.com/security/cve/CVE-2023-23604",
      "title": "Creation of duplicate SystemPrincipal from less secure contexts",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00463,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25750",
      "url": "https://patchblox.com/security/cve/CVE-2023-25750",
      "title": "Mozilla Firefox and 2 others: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.00456,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38475",
      "url": "https://patchblox.com/security/cve/CVE-2022-38475",
      "title": "Mozilla Firefox and 2 others: Incorrect Authorization",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29544",
      "url": "https://patchblox.com/security/cve/CVE-2023-29544",
      "title": "Mozilla Firefox and 2 others: If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00451,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45417",
      "url": "https://patchblox.com/security/cve/CVE-2022-45417",
      "title": "Mozilla Firefox and 2 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "Routine",
      "cvss": 4.3,
      "epss": 0.00436,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-38474",
      "url": "https://patchblox.com/security/cve/CVE-2022-38474",
      "title": "Mozilla Firefox and 2 others: Exposure of Resource to Wrong Sphere",
      "priority": "Routine",
      "cvss": 4.3,
      "epss": 0.0042,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34415",
      "url": "https://patchblox.com/security/cve/CVE-2023-34415",
      "title": "Mozilla Firefox and 2 others: When choosing a site-isolated process for a document loaded from a data: URL that was the result of a\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00413,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29538",
      "url": "https://patchblox.com/security/cve/CVE-2023-29538",
      "title": "Mozilla Firefox and 2 others: Under specific circumstances a WebExtension may have received a \u003Ccode\u003Ejar:file:///\u003C/code\u003E URI instead\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 4.3,
      "epss": 0.004,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-45419",
      "url": "https://patchblox.com/security/cve/CVE-2022-45419",
      "title": "Mozilla Firefox and 2 others: Improper Certificate Validation",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00394,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28159",
      "url": "https://patchblox.com/security/cve/CVE-2023-28159",
      "title": "Mozilla Firefox and 2 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "Routine",
      "cvss": 4.3,
      "epss": 0.00348,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23597",
      "url": "https://patchblox.com/security/cve/CVE-2023-23597",
      "title": "Logic bug in process allocation allowed to read arbitrary files",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0034,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36316",
      "url": "https://patchblox.com/security/cve/CVE-2022-36316",
      "title": "Mozilla Firefox and 2 others: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00339,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29549",
      "url": "https://patchblox.com/security/cve/CVE-2023-29549",
      "title": "Mozilla Firefox and 2 others: Inadequate Encryption Strength",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.0033,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29540",
      "url": "https://patchblox.com/security/cve/CVE-2023-29540",
      "title": "Mozilla Firefox and 2 others: Using a redirect embedded into \u003Ccode\u003EsourceMappingUrls\u003C/code\u003E could allow for navigation to external\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.1,
      "epss": 0.00315,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-3266",
      "url": "https://patchblox.com/security/cve/CVE-2022-3266",
      "title": "Mozilla Thunderbird and 4 others: Out-of-bounds Read",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 5.5,
      "epss": 0.00304,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37210",
      "url": "https://patchblox.com/security/cve/CVE-2023-37210",
      "title": "Mozilla Firefox and 2 others: Origin Validation Error",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00284,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36314",
      "url": "https://patchblox.com/security/cve/CVE-2022-36314",
      "title": "Mozilla Thunderbird and 4 others: Uncontrolled Search Path Element",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.5,
      "epss": 0.00224,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-36315",
      "url": "https://patchblox.com/security/cve/CVE-2022-36315",
      "title": "Mozilla Firefox and 2 others: Insufficient Verification of Data Authenticity",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 4.3,
      "epss": 0.00209,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29532",
      "url": "https://patchblox.com/security/cve/CVE-2023-29532",
      "title": "Mozilla Firefox and 4 others: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing\u2026",
      "priority": "Routine",
      "cvss": 5.5,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-42931",
      "url": "https://patchblox.com/security/cve/CVE-2022-42931",
      "title": "Mozilla Firefox and 2 others: Cleartext Storage of Sensitive Information",
      "priority": "Routine",
      "severity": "Low",
      "cvss": 3.3,
      "epss": 0.00141,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}