# Mozilla Firefox ESR (en-US) 115.4.0

Mozilla Firefox ESR (en-US) 115.4.0, released October 17, 2023, fixes 141 CVEs in Mozilla Firefox ESR (en-US). None of them is reported as exploited. Patch Radar priority: Urgent. The latest Mozilla Firefox ESR (en-US) is 153.7.0, which also fixes every one of these CVEs.

- Web page: https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-115.4.0
- Platform: Windows apps
- Released: Oct 17, 2023
- Priority: Urgent (Closes CVE-2023-29542, rated Critical)
- CVEs: 141, exploited: 0, on CISA KEV: 0
- Superseded by: [Mozilla Firefox ESR (en-US) 153.7.0](https://patchblox.com/security/data/product/windows-app/mozilla-firefox-esr-en-us.md), the latest version, which also fixes every CVE listed here

## Applies to

| Product | Release | Fixed in |
|---|---|---|
| [Mozilla Firefox ESR (en-US)](https://patchblox.com/security/data/product/windows-app/mozilla-firefox-esr-en-us.md) |  | 115.4.0 |

## CVEs this fix closes

| CVE | Priority | Title | CVSS | EPSS | Exploitation |
|---|---|---|---:|---:|---|
| [CVE-2023-29542](https://patchblox.com/security/data/cve/CVE-2023-29542.md) | Urgent | Mozilla Firefox and 4 others: A newline in a filename could have been used to bypass the file extension security mechanisms that replace… | 9.8 | 0.0094 |  |
| [CVE-2023-34416](https://patchblox.com/security/data/cve/CVE-2023-34416.md) | Urgent | Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. | 9.8 | 0.0093 |  |
| [CVE-2022-40959](https://patchblox.com/security/data/cve/CVE-2022-40959.md) | High | Mozilla Thunderbird and 4 others: Insecure Storage of Sensitive Information | 8.8 | 0.0146 |  |
| [CVE-2022-40962](https://patchblox.com/security/data/cve/CVE-2022-40962.md) | High | Mozilla Thunderbird and 4 others: Out-of-bounds Write | 8.8 | 0.0143 |  |
| [CVE-2022-40957](https://patchblox.com/security/data/cve/CVE-2022-40957.md) | High | Mozilla Thunderbird and 4 others: Improper Handling of Inconsistent Structural Elements | 8.8 | 0.0124 |  |
| [CVE-2022-40958](https://patchblox.com/security/data/cve/CVE-2022-40958.md) | High | Mozilla Thunderbird and 4 others: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 8.8 | 0.0118 |  |
| [CVE-2022-40960](https://patchblox.com/security/data/cve/CVE-2022-40960.md) | High | Mozilla Thunderbird and 4 others: Use After Free | 8.8 | 0.0108 |  |
| [CVE-2022-45406](https://patchblox.com/security/data/cve/CVE-2022-45406.md) | High | Mozilla Firefox and 4 others: Use After Free | 9.8 | 0.0107 |  |
| [CVE-2022-46882](https://patchblox.com/security/data/cve/CVE-2022-46882.md) | High | Mozilla Firefox and 4 others: Use After Free | 9.8 | 0.0098 |  |
| [CVE-2022-46874](https://patchblox.com/security/data/cve/CVE-2022-46874.md) | High | Mozilla Firefox and 4 others: Improper Control of Generation of Code ('Code Injection') | 8.8 | 0.0097 |  |
| [CVE-2022-46871](https://patchblox.com/security/data/cve/CVE-2022-46871.md) | High | Mozilla Firefox and 2 others: Use of Unmaintained Third Party Components | 8.8 | 0.0097 |  |
| [CVE-2022-40956](https://patchblox.com/security/data/cve/CVE-2022-40956.md) | High | Mozilla Thunderbird and 4 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 8.8 | 0.0094 |  |
| [CVE-2022-38478](https://patchblox.com/security/data/cve/CVE-2022-38478.md) | High | Mozilla Thunderbird and 4 others: Out-of-bounds Write | 8.8 | 0.0094 |  |
| [CVE-2022-38477](https://patchblox.com/security/data/cve/CVE-2022-38477.md) | High | Mozilla Thunderbird and 4 others: Out-of-bounds Write | 8.8 | 0.0093 |  |
| [CVE-2023-32214](https://patchblox.com/security/data/cve/CVE-2023-32214.md) | High | Mozilla Firefox and 4 others: Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. | 7.5 | 0.0092 |  |
| [CVE-2023-34414](https://patchblox.com/security/data/cve/CVE-2023-34414.md) | High | Mozilla Firefox and 4 others: The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses… | 9.8 | 0.0090 |  |
| [CVE-2022-42928](https://patchblox.com/security/data/cve/CVE-2022-42928.md) | High | Mozilla Firefox and 4 others: NULL Pointer Dereference | 8.8 | 0.0089 |  |
| [CVE-2022-45410](https://patchblox.com/security/data/cve/CVE-2022-45410.md) | High | Mozilla Firefox and 4 others: Missing Authorization | 9.8 | 0.0082 |  |
| [CVE-2023-0767](https://patchblox.com/security/data/cve/CVE-2023-0767.md) | High | Mozilla Firefox and 4 others: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory… | 8.8 | 0.0082 |  |
| [CVE-2022-2505](https://patchblox.com/security/data/cve/CVE-2022-2505.md) | High | Mozilla Thunderbird and 4 others: Out-of-bounds Write | 8.8 | 0.0080 |  |
| [CVE-2022-45409](https://patchblox.com/security/data/cve/CVE-2022-45409.md) | High | Mozilla Firefox and 4 others: Use After Free | 9.8 | 0.0079 |  |
| [CVE-2022-42929](https://patchblox.com/security/data/cve/CVE-2022-42929.md) | High | Mozilla Firefox and 4 others: Uncontrolled Resource Consumption | 8.8 | 0.0079 |  |
| [CVE-2023-32216](https://patchblox.com/security/data/cve/CVE-2023-32216.md) | High | Mozilla Firefox and 2 others: Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla… | 9.8 | 0.0078 |  |
| [CVE-2023-34417](https://patchblox.com/security/data/cve/CVE-2023-34417.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 9.8 | 0.0078 |  |
| [CVE-2022-45418](https://patchblox.com/security/data/cve/CVE-2022-45418.md) | High | Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames | 9.8 | 0.0078 |  |
| [CVE-2023-25734](https://patchblox.com/security/data/cve/CVE-2023-25734.md) | High | Mozilla Firefox and 4 others: URL Redirection to Untrusted Site ('Open Redirect') | 8.1 | 0.0078 |  |
| [CVE-2022-46878](https://patchblox.com/security/data/cve/CVE-2022-46878.md) | High | Mozilla Firefox and 4 others: Mozilla developers Randell Jesup, Valentin Gosu, Olli Pettay, and the Mozilla Fuzzing Team reported memory… | 8.8 | 0.0077 |  |
| [CVE-2022-46881](https://patchblox.com/security/data/cve/CVE-2022-46881.md) | High | Mozilla Firefox and 4 others: Out-of-bounds Write | 8.8 | 0.0077 |  |
| [CVE-2022-42932](https://patchblox.com/security/data/cve/CVE-2022-42932.md) | High | Mozilla Firefox and 4 others: Out-of-bounds Write | 8.8 | 0.0077 |  |
| [CVE-2023-32209](https://patchblox.com/security/data/cve/CVE-2023-32209.md) | High | Mozilla Firefox and 2 others: A maliciously crafted favicon could have led to an out of memory crash. | 7.5 | 0.0076 |  |
| [CVE-2022-46877](https://patchblox.com/security/data/cve/CVE-2022-46877.md) | High | Mozilla Firefox and 2 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 8.8 | 0.0076 |  |
| [CVE-2023-37201](https://patchblox.com/security/data/cve/CVE-2023-37201.md) | High | Mozilla Firefox and 4 others: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. | 8.8 | 0.0076 |  |
| [CVE-2023-37202](https://patchblox.com/security/data/cve/CVE-2023-37202.md) | High | Mozilla Firefox and 4 others: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments… | 8.8 | 0.0076 |  |
| [CVE-2023-32213](https://patchblox.com/security/data/cve/CVE-2023-32213.md) | High | Mozilla Firefox and 4 others: When reading a file, an uninitialized value could have been used as read limit. | 8.8 | 0.0075 |  |
| [CVE-2023-32215](https://patchblox.com/security/data/cve/CVE-2023-32215.md) | High | Mozilla Firefox and 4 others: Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst,… | 8.8 | 0.0075 |  |
| [CVE-2023-37211](https://patchblox.com/security/data/cve/CVE-2023-37211.md) | High | Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. | 8.8 | 0.0075 |  |
| [CVE-2022-45421](https://patchblox.com/security/data/cve/CVE-2022-45421.md) | High | Mozilla Firefox and 4 others: Out-of-bounds Write | 9.8 | 0.0075 |  |
| [CVE-2022-46873](https://patchblox.com/security/data/cve/CVE-2022-46873.md) | High | Mozilla Firefox and 2 others: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') | 8.8 | 0.0075 |  |
| [CVE-2023-29535](https://patchblox.com/security/data/cve/CVE-2023-29535.md) | High | Mozilla Firefox and 4 others: Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly… | 7.5 | 0.0075 |  |
| [CVE-2023-29541](https://patchblox.com/security/data/cve/CVE-2023-29541.md) | High | Mozilla Firefox and 4 others: Improper Encoding or Escaping of Output | 8.8 | 0.0074 |  |
| [CVE-2022-45403](https://patchblox.com/security/data/cve/CVE-2022-45403.md) | High | Mozilla Firefox and 4 others: Observable Discrepancy | 9.8 | 0.0074 |  |
| [CVE-2022-36319](https://patchblox.com/security/data/cve/CVE-2022-36319.md) | High | Mozilla Thunderbird and 4 others: Improper Restriction of Rendered UI Layers or Frames | 8.8 | 0.0074 |  |
| [CVE-2023-37207](https://patchblox.com/security/data/cve/CVE-2023-37207.md) | High | Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an… | 8.8 | 0.0074 |  |
| [CVE-2023-25732](https://patchblox.com/security/data/cve/CVE-2023-25732.md) | High | Mozilla Firefox and 4 others: Out-of-bounds Write | 8.8 | 0.0074 |  |
| [CVE-2023-29539](https://patchblox.com/security/data/cve/CVE-2023-29539.md) | High | Mozilla Firefox and 4 others: When handling the filename directive in the Content-Disposition header, the filename would be truncated… | 8.8 | 0.0074 |  |
| [CVE-2022-38473](https://patchblox.com/security/data/cve/CVE-2022-38473.md) | High | Mozilla Thunderbird and 4 others: Improper Preservation of Permissions | 8.8 | 0.0074 |  |
| [CVE-2023-32207](https://patchblox.com/security/data/cve/CVE-2023-32207.md) | High | Mozilla Firefox and 4 others: Authentication Bypass by Spoofing | 8.8 | 0.0073 |  |
| [CVE-2023-28176](https://patchblox.com/security/data/cve/CVE-2023-28176.md) | High | Mozilla Firefox and 4 others: Out-of-bounds Write | 8.8 | 0.0072 |  |
| [CVE-2022-45416](https://patchblox.com/security/data/cve/CVE-2022-45416.md) | High | Mozilla Firefox and 4 others: Observable Discrepancy | 9.8 | 0.0072 |  |
| [CVE-2023-25735](https://patchblox.com/security/data/cve/CVE-2023-25735.md) | High | Mozilla Firefox and 4 others: Use After Free | 8.8 | 0.0072 |  |
| [CVE-2023-29550](https://patchblox.com/security/data/cve/CVE-2023-29550.md) | High | Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. | 8.8 | 0.0071 |  |
| [CVE-2022-45408](https://patchblox.com/security/data/cve/CVE-2022-45408.md) | High | Mozilla Firefox and 4 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 9.8 | 0.0071 |  |
| [CVE-2022-36320](https://patchblox.com/security/data/cve/CVE-2022-36320.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 9.8 | 0.0071 |  |
| [CVE-2023-32206](https://patchblox.com/security/data/cve/CVE-2023-32206.md) | High | Mozilla Firefox and 4 others: An out-of-bound read could have led to a crash in the RLBox Expat driver. | 7.5 | 0.0070 |  |
| [CVE-2023-23605](https://patchblox.com/security/data/cve/CVE-2023-23605.md) | High | Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7 | 8.8 | 0.0070 |  |
| [CVE-2023-25737](https://patchblox.com/security/data/cve/CVE-2023-25737.md) | High | Mozilla Firefox and 4 others: Incorrect Type Conversion or Cast | 8.8 | 0.0070 |  |
| [CVE-2023-28162](https://patchblox.com/security/data/cve/CVE-2023-28162.md) | High | Mozilla Firefox and 4 others: Access of Resource Using Incompatible Type ('Type Confusion') | 8.8 | 0.0070 |  |
| [CVE-2023-29536](https://patchblox.com/security/data/cve/CVE-2023-29536.md) | High | Mozilla Firefox and 4 others: An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled… | 8.8 | 0.0070 |  |
| [CVE-2022-46880](https://patchblox.com/security/data/cve/CVE-2022-46880.md) | High | Mozilla Thunderbird and 4 others: Use After Free | 8.8 | 0.0070 |  |
| [CVE-2023-25751](https://patchblox.com/security/data/cve/CVE-2023-25751.md) | High | Mozilla Firefox and 4 others: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be… | 7.5 | 0.0069 |  |
| [CVE-2023-25736](https://patchblox.com/security/data/cve/CVE-2023-25736.md) | High | Mozilla Firefox and 2 others: An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. | 9.8 | 0.0069 |  |
| [CVE-2022-46879](https://patchblox.com/security/data/cve/CVE-2022-46879.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 8.8 | 0.0068 |  |
| [CVE-2023-25739](https://patchblox.com/security/data/cve/CVE-2023-25739.md) | High | Mozilla Firefox and 4 others: Use After Free | 8.8 | 0.0068 |  |
| [CVE-2022-45405](https://patchblox.com/security/data/cve/CVE-2022-45405.md) | High | Mozilla Firefox and 4 others: Use After Free | 9.8 | 0.0068 |  |
| [CVE-2023-25729](https://patchblox.com/security/data/cve/CVE-2023-25729.md) | High | Mozilla Firefox and 4 others: Incorrect Authorization | 8.8 | 0.0068 |  |
| [CVE-2023-25744](https://patchblox.com/security/data/cve/CVE-2023-25744.md) | High | Mozilla Firefox and 2 others: Mmemory safety bugs present in Firefox 109 and Firefox ESR 102.7. | 8.8 | 0.0067 |  |
| [CVE-2023-25728](https://patchblox.com/security/data/cve/CVE-2023-25728.md) | High | Mozilla Firefox and 4 others: Observable Discrepancy | 7.5 | 0.0067 |  |
| [CVE-2023-25745](https://patchblox.com/security/data/cve/CVE-2023-25745.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 8.8 | 0.0067 |  |
| [CVE-2022-45407](https://patchblox.com/security/data/cve/CVE-2022-45407.md) | High | Mozilla Firefox and 2 others: Use After Free | 7.5 | 0.0065 |  |
| [CVE-2022-45404](https://patchblox.com/security/data/cve/CVE-2022-45404.md) | High | Mozilla Firefox and 4 others: User Interface (UI) Misrepresentation of Critical Information | 9.8 | 0.0065 |  |
| [CVE-2023-25743](https://patchblox.com/security/data/cve/CVE-2023-25743.md) | High | Mozilla Firefox and 2 others: A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing… | 7.5 | 0.0065 |  |
| [CVE-2023-25742](https://patchblox.com/security/data/cve/CVE-2023-25742.md) | High | Mozilla Firefox and 4 others: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the… | 7.5 | 0.0065 |  |
| [CVE-2023-23598](https://patchblox.com/security/data/cve/CVE-2023-23598.md) | High | Arbitrary file read from GTK drag and drop on Linux | 8.8 | 0.0064 |  |
| [CVE-2023-23603](https://patchblox.com/security/data/cve/CVE-2023-23603.md) | High | Calls to console.log allowed bypassing Content Security Policy via format directive | 8.8 | 0.0064 |  |
| [CVE-2023-37212](https://patchblox.com/security/data/cve/CVE-2023-37212.md) | High | Mozilla Firefox and 2 others: Memory safety bugs present in Firefox 114. | 8.8 | 0.0064 |  |
| [CVE-2023-3600](https://patchblox.com/security/data/cve/CVE-2023-3600.md) | High | Use-after-free in workers | 8.8 | 0.0063 |  |
| [CVE-2023-32205](https://patchblox.com/security/data/cve/CVE-2023-32205.md) | High | Mozilla Firefox and 4 others: In multiple cases browser prompts could have been obscured by popups controlled by content. | 7.5 | 0.0063 |  |
| [CVE-2023-28161](https://patchblox.com/security/data/cve/CVE-2023-28161.md) | High | Mozilla Firefox and 2 others: Improper Preservation of Permissions | 8.8 | 0.0062 |  |
| [CVE-2023-25733](https://patchblox.com/security/data/cve/CVE-2023-25733.md) | High | Mozilla Firefox and 2 others: Unchecked Return Value | 7.5 | 0.0062 |  |
| [CVE-2022-45411](https://patchblox.com/security/data/cve/CVE-2022-45411.md) | High | Mozilla Firefox and 4 others: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 9.8 | 0.0061 |  |
| [CVE-2023-25752](https://patchblox.com/security/data/cve/CVE-2023-25752.md) | High | Mozilla Firefox and 4 others: When accessing throttled streams, the count of available bytes needed to be checked in the calling function… | 7.5 | 0.0061 |  |
| [CVE-2022-45420](https://patchblox.com/security/data/cve/CVE-2022-45420.md) | High | Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames | 9.8 | 0.0061 |  |
| [CVE-2022-46883](https://patchblox.com/security/data/cve/CVE-2022-46883.md) | High | Mozilla Firefox and 2 others: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') | 8.8 | 0.0061 |  |
| [CVE-2023-23599](https://patchblox.com/security/data/cve/CVE-2023-23599.md) | High | Malicious command could be hidden in devtools output on Windows | 8.8 | 0.0060 |  |
| [CVE-2023-23602](https://patchblox.com/security/data/cve/CVE-2023-23602.md) | High | Content Security Policy wasn't being correctly applied to WebSockets in WebWorkers | 8.8 | 0.0060 |  |
| [CVE-2023-37209](https://patchblox.com/security/data/cve/CVE-2023-37209.md) | High | Mozilla Firefox and 2 others: A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object… | 8.8 | 0.0059 |  |
| [CVE-2023-29533](https://patchblox.com/security/data/cve/CVE-2023-29533.md) | High | Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>,… | 7.5 | 0.0057 |  |
| [CVE-2023-25731](https://patchblox.com/security/data/cve/CVE-2023-25731.md) | High | Mozilla Firefox and 2 others: Improper Validation of Specified Quantity in Input | 8.8 | 0.0056 |  |
| [CVE-2023-29537](https://patchblox.com/security/data/cve/CVE-2023-29537.md) | High | Mozilla Firefox and 2 others: Multiple race conditions in the font initialization could have led to memory corruption and execution… | 7.5 | 0.0056 |  |
| [CVE-2023-25730](https://patchblox.com/security/data/cve/CVE-2023-25730.md) | High | Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames | 7.5 | 0.0055 |  |
| [CVE-2023-28177](https://patchblox.com/security/data/cve/CVE-2023-28177.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 8.8 | 0.0055 |  |
| [CVE-2022-46885](https://patchblox.com/security/data/cve/CVE-2022-46885.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 8.8 | 0.0054 |  |
| [CVE-2022-36318](https://patchblox.com/security/data/cve/CVE-2022-36318.md) | High | Mozilla Thunderbird and 4 others: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 8.8 | 0.0053 |  |
| [CVE-2023-29543](https://patchblox.com/security/data/cve/CVE-2023-29543.md) | High | Mozilla Firefox and 2 others: Improper Encoding or Escaping of Output | 8.8 | 0.0053 |  |
| [CVE-2023-29551](https://patchblox.com/security/data/cve/CVE-2023-29551.md) | High | Mozilla Firefox and 2 others: Out-of-bounds Write | 8.8 | 0.0053 |  |
| [CVE-2023-25740](https://patchblox.com/security/data/cve/CVE-2023-25740.md) | High | Mozilla Firefox and 2 others: Insufficiently Protected Credentials | 8.8 | 0.0052 |  |
| [CVE-2023-23606](https://patchblox.com/security/data/cve/CVE-2023-23606.md) | High | Memory safety bugs fixed in Firefox 109 | 8.8 | 0.0052 |  |
| [CVE-2022-46884](https://patchblox.com/security/data/cve/CVE-2022-46884.md) | High | Mozilla Firefox and 2 others: A potential use-after-free vulnerability existed in SVG Images if the Refresh Driver was destroyed at… | 8.8 | 0.0048 |  |
| [CVE-2022-42927](https://patchblox.com/security/data/cve/CVE-2022-42927.md) | High | Mozilla Firefox and 4 others: Origin Validation Error | 8.8 | 0.0045 |  |
| [CVE-2022-42930](https://patchblox.com/security/data/cve/CVE-2022-42930.md) | High | Mozilla Firefox and 2 others: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') | 7.1 | 0.0042 |  |
| [CVE-2022-38472](https://patchblox.com/security/data/cve/CVE-2022-38472.md) | High | Mozilla Thunderbird and 4 others: Origin Validation Error | 8.8 | 0.0039 |  |
| [CVE-2023-23601](https://patchblox.com/security/data/cve/CVE-2023-23601.md) | High | URL being dragged from cross-origin iframe into same tab triggers navigation | 8.8 | 0.0035 |  |
| [CVE-2023-28164](https://patchblox.com/security/data/cve/CVE-2023-28164.md) | High | Mozilla Firefox and 4 others: Origin Validation Error | 7.5 | 0.0035 |  |
| [CVE-2023-37203](https://patchblox.com/security/data/cve/CVE-2023-37203.md) | High | Mozilla Firefox and 2 others: Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed… | 7.8 | 0.0025 |  |
| [CVE-2022-45415](https://patchblox.com/security/data/cve/CVE-2022-45415.md) | High | Mozilla Firefox and 2 others: Unrestricted Upload of File with Dangerous Type | 7.8 | 0.0024 |  |
| [CVE-2023-37208](https://patchblox.com/security/data/cve/CVE-2023-37208.md) | High | Mozilla Firefox and 4 others: Unrestricted Upload of File with Dangerous Type | 8.8 | 0.0023 |  |
| [CVE-2023-28163](https://patchblox.com/security/data/cve/CVE-2023-28163.md) | Routine | Mozilla Firefox and 4 others: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 6.5 | 0.0080 |  |
| [CVE-2023-25741](https://patchblox.com/security/data/cve/CVE-2023-25741.md) | Routine | Mozilla Firefox and 2 others: Observable Discrepancy | 6.5 | 0.0077 |  |
| [CVE-2023-32211](https://patchblox.com/security/data/cve/CVE-2023-32211.md) | Routine | Mozilla Firefox and 4 others: A type checking bug would have led to invalid code being compiled. | 6.5 | 0.0074 |  |
| [CVE-2023-37206](https://patchblox.com/security/data/cve/CVE-2023-37206.md) | Routine | Mozilla Firefox and 2 others: Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive… | 6.5 | 0.0072 |  |
| [CVE-2023-29548](https://patchblox.com/security/data/cve/CVE-2023-29548.md) | Routine | Mozilla Firefox and 4 others: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. | 6.5 | 0.0070 |  |
| [CVE-2023-32212](https://patchblox.com/security/data/cve/CVE-2023-32212.md) | Routine | Mozilla Firefox and 4 others: An attacker could have positioned a `datalist` element to obscure the address bar. | 6.1 | 0.0065 |  |
| [CVE-2023-25738](https://patchblox.com/security/data/cve/CVE-2023-25738.md) | Routine | Mozilla Firefox and 4 others: Out-of-bounds Read | 6.5 | 0.0064 |  |
| [CVE-2023-29545](https://patchblox.com/security/data/cve/CVE-2023-29545.md) | Routine | Mozilla Firefox and 4 others: Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment… | 6.5 | 0.0058 |  |
| [CVE-2023-3482](https://patchblox.com/security/data/cve/CVE-2023-3482.md) | Routine | Mozilla Firefox and 2 others: When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage… | 6.5 | 0.0058 |  |
| [CVE-2023-32210](https://patchblox.com/security/data/cve/CVE-2023-32210.md) | Routine | Mozilla Firefox and 2 others: Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an… | 6.5 | 0.0054 |  |
| [CVE-2023-32208](https://patchblox.com/security/data/cve/CVE-2023-32208.md) | Routine | Mozilla Firefox and 2 others: Service workers could reveal script base URL due to dynamic `import()`. | 5.3 | 0.0052 |  |
| [CVE-2023-37204](https://patchblox.com/security/data/cve/CVE-2023-37204.md) | Routine | Mozilla Firefox and 2 others: A website could have obscured the fullscreen notification by using an option element by introducing lag… | 6.5 | 0.0052 |  |
| [CVE-2023-37205](https://patchblox.com/security/data/cve/CVE-2023-37205.md) | Routine | Mozilla Firefox and 2 others: The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. | 6.5 | 0.0052 |  |
| [CVE-2023-28160](https://patchblox.com/security/data/cve/CVE-2023-28160.md) | Routine | Mozilla Firefox and 2 others: Direct Request ('Forced Browsing') | 6.5 | 0.0051 |  |
| [CVE-2023-29547](https://patchblox.com/security/data/cve/CVE-2023-29547.md) | Routine | Mozilla Firefox and 2 others: When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have… | 6.5 | 0.0047 |  |
| [CVE-2023-23604](https://patchblox.com/security/data/cve/CVE-2023-23604.md) | Routine | Creation of duplicate SystemPrincipal from less secure contexts | 6.5 | 0.0046 |  |
| [CVE-2023-25750](https://patchblox.com/security/data/cve/CVE-2023-25750.md) | Routine | Mozilla Firefox and 2 others: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 4.3 | 0.0046 |  |
| [CVE-2022-38475](https://patchblox.com/security/data/cve/CVE-2022-38475.md) | Routine | Mozilla Firefox and 2 others: Incorrect Authorization | 6.5 | 0.0045 |  |
| [CVE-2023-29544](https://patchblox.com/security/data/cve/CVE-2023-29544.md) | Routine | Mozilla Firefox and 2 others: If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could… | 6.5 | 0.0045 |  |
| [CVE-2022-45417](https://patchblox.com/security/data/cve/CVE-2022-45417.md) | Routine | Mozilla Firefox and 2 others: Improper Restriction of Rendered UI Layers or Frames | 4.3 | 0.0044 |  |
| [CVE-2022-38474](https://patchblox.com/security/data/cve/CVE-2022-38474.md) | Routine | Mozilla Firefox and 2 others: Exposure of Resource to Wrong Sphere | 4.3 | 0.0042 |  |
| [CVE-2023-34415](https://patchblox.com/security/data/cve/CVE-2023-34415.md) | Routine | Mozilla Firefox and 2 others: When choosing a site-isolated process for a document loaded from a data: URL that was the result of a… | 6.1 | 0.0041 |  |
| [CVE-2023-29538](https://patchblox.com/security/data/cve/CVE-2023-29538.md) | Routine | Mozilla Firefox and 2 others: Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead… | 4.3 | 0.0040 |  |
| [CVE-2022-45419](https://patchblox.com/security/data/cve/CVE-2022-45419.md) | Routine | Mozilla Firefox and 2 others: Improper Certificate Validation | 6.5 | 0.0039 |  |
| [CVE-2023-28159](https://patchblox.com/security/data/cve/CVE-2023-28159.md) | Routine | Mozilla Firefox and 2 others: Improper Restriction of Rendered UI Layers or Frames | 4.3 | 0.0035 |  |
| [CVE-2023-23597](https://patchblox.com/security/data/cve/CVE-2023-23597.md) | Routine | Logic bug in process allocation allowed to read arbitrary files | 6.5 | 0.0034 |  |
| [CVE-2022-36316](https://patchblox.com/security/data/cve/CVE-2022-36316.md) | Routine | Mozilla Firefox and 2 others: URL Redirection to Untrusted Site ('Open Redirect') | 6.1 | 0.0034 |  |
| [CVE-2023-29549](https://patchblox.com/security/data/cve/CVE-2023-29549.md) | Routine | Mozilla Firefox and 2 others: Inadequate Encryption Strength | 6.5 | 0.0033 |  |
| [CVE-2023-29540](https://patchblox.com/security/data/cve/CVE-2023-29540.md) | Routine | Mozilla Firefox and 2 others: Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to external… | 6.1 | 0.0032 |  |
| [CVE-2022-3266](https://patchblox.com/security/data/cve/CVE-2022-3266.md) | Routine | Mozilla Thunderbird and 4 others: Out-of-bounds Read | 5.5 | 0.0030 |  |
| [CVE-2023-37210](https://patchblox.com/security/data/cve/CVE-2023-37210.md) | Routine | Mozilla Firefox and 2 others: Origin Validation Error | 6.5 | 0.0028 |  |
| [CVE-2022-36314](https://patchblox.com/security/data/cve/CVE-2022-36314.md) | Routine | Mozilla Thunderbird and 4 others: Uncontrolled Search Path Element | 5.5 | 0.0022 |  |
| [CVE-2022-36315](https://patchblox.com/security/data/cve/CVE-2022-36315.md) | Routine | Mozilla Firefox and 2 others: Insufficient Verification of Data Authenticity | 4.3 | 0.0021 |  |
| [CVE-2023-29532](https://patchblox.com/security/data/cve/CVE-2023-29532.md) | Routine | Mozilla Firefox and 4 others: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing… | 5.5 | 0.0019 |  |
| [CVE-2022-42931](https://patchblox.com/security/data/cve/CVE-2022-42931.md) | Routine | Mozilla Firefox and 2 others: Cleartext Storage of Sensitive Information | 3.3 | 0.0014 |  |

---

Data as of 2026-11-11T13:47:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.