{
  "fix": "Mozilla Thunderbird (en-US) 115.8.0",
  "url": "https://patchblox.com/security/fix/windows-app/mozilla.thunderbird-115.8.0",
  "summary": "Mozilla Thunderbird (en-US) 115.8.0, released February 21, 2024, fixes 120 CVEs in Mozilla Thunderbird (en-US). 2 of them are being exploited (CVE-2023-4863); 2 on CISA KEV. Patch Radar priority: Patch now. The latest Mozilla Thunderbird (en-US) is 159.0, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Mozilla Thunderbird (en-US) 115.8.0",
  "released": "2024-02-21T00:00:00Z",
  "priority": "Patch now",
  "priorityTier": 1,
  "priorityReason": "Closes CVE-2023-4863, exploited (CISA KEV)",
  "supported": true,
  "cveCount": 120,
  "exploitedCveCount": 2,
  "kevCveCount": 2,
  "ransomwareCveCount": 0,
  "maxEpss": 0.99979,
  "maxCvss": 9.8,
  "appliesTo": [
    {
      "product": "Mozilla Thunderbird (en-US)",
      "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-thunderbird-en-us",
      "fixedVersion": "115.8.0",
      "latestVersion": "159.0",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Mozilla Thunderbird (en-US)",
    "latestVersion": "159.0",
    "productUrl": "https://patchblox.com/security/product/windows-app/mozilla-thunderbird-en-us"
  },
  "cves": [
    {
      "cveId": "CVE-2023-4863",
      "url": "https://patchblox.com/security/cve/CVE-2023-4863",
      "title": "Chromium: CVE-2023-4863 Heap buffer overflow in WebP",
      "priority": "Patch now",
      "severity": "high",
      "cvss": 9.6,
      "epss": 0.99979,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": true
    },
    {
      "cveId": "CVE-2023-5217",
      "url": "https://patchblox.com/security/cve/CVE-2023-5217",
      "title": "Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx",
      "priority": "Patch now",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.49013,
      "kev": true,
      "ransomware": false,
      "exploited": true,
      "disclosed": true
    },
    {
      "cveId": "CVE-2023-5176",
      "url": "https://patchblox.com/security/cve/CVE-2023-5176",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.01388,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5174",
      "url": "https://patchblox.com/security/cve/CVE-2023-5174",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.012,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5168",
      "url": "https://patchblox.com/security/cve/CVE-2023-5168",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.01116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29542",
      "url": "https://patchblox.com/security/cve/CVE-2023-29542",
      "title": "Mozilla Firefox and 4 others: A newline in a filename could have been used to bypass the file extension security mechanisms that replace\u2026",
      "priority": "Urgent",
      "cvss": 9.8,
      "epss": 0.0094,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34416",
      "url": "https://patchblox.com/security/cve/CVE-2023-34416",
      "title": "Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.0093,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4057",
      "url": "https://patchblox.com/security/cve/CVE-2023-4057",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 115, Firefox ESR 115.0, and Thunderbird 115.0.",
      "priority": "Urgent",
      "severity": "critical",
      "cvss": 9.8,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-2614",
      "url": "https://patchblox.com/security/cve/CVE-2024-2614",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "Urgent",
      "severity": "Critical",
      "cvss": 8.8,
      "epss": 0.00886,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6856",
      "url": "https://patchblox.com/security/cve/CVE-2023-6856",
      "title": "Mozilla Firefox ESR and 5 others: The WebGL \u0060DrawElementsInstanced\u0060 method was susceptible to a heap buffer overflow when used on systems\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.2063,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0741",
      "url": "https://patchblox.com/security/cve/CVE-2024-0741",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.02155,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6858",
      "url": "https://patchblox.com/security/cve/CVE-2023-6858",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01544,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5730",
      "url": "https://patchblox.com/security/cve/CVE-2023-5730",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3.",
      "priority": "High",
      "severity": "Important",
      "cvss": 9.8,
      "epss": 0.01541,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5724",
      "url": "https://patchblox.com/security/cve/CVE-2023-5724",
      "title": "Mozilla Firefox ESR and 5 others: Uncontrolled Resource Consumption",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01521,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6861",
      "url": "https://patchblox.com/security/cve/CVE-2023-6861",
      "title": "Mozilla Firefox ESR and 5 others: The \u0060nsWindow::PickerOpen(void)\u0060 method was susceptible to a heap buffer overflow when running in headless\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01411,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5728",
      "url": "https://patchblox.com/security/cve/CVE-2023-5728",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.01321,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6864",
      "url": "https://patchblox.com/security/cve/CVE-2023-6864",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01194,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6859",
      "url": "https://patchblox.com/security/cve/CVE-2023-6859",
      "title": "Mozilla Firefox ESR and 5 others: A use-after-free condition affected TLS socket creation when under memory pressure.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01092,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6863",
      "url": "https://patchblox.com/security/cve/CVE-2023-6863",
      "title": "Mozilla Firefox ESR and 5 others: The \u0060ShutdownObserver()\u0060 was susceptible to potentially undefined behavior due to its reliance on a dynamic\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.01037,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6862",
      "url": "https://patchblox.com/security/cve/CVE-2023-6862",
      "title": "Mozilla Thunderbird and 1 other: A use-after-free was identified in the \u0060nsDNSService::Init\u0060.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00951,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6212",
      "url": "https://patchblox.com/security/cve/CVE-2023-6212",
      "title": "Mozilla Firefox ESR and 5 others: Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00947,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32214",
      "url": "https://patchblox.com/security/cve/CVE-2023-32214",
      "title": "Mozilla Firefox and 4 others: Protocol handlers \u0060ms-cxh\u0060 and \u0060ms-cxh-full\u0060 could have been leveraged to trigger a denial of service.",
      "priority": "High",
      "cvss": 7.5,
      "epss": 0.00918,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6207",
      "url": "https://patchblox.com/security/cve/CVE-2023-6207",
      "title": "Mozilla Firefox ESR and 5 others: Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00906,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-34414",
      "url": "https://patchblox.com/security/cve/CVE-2023-34414",
      "title": "Mozilla Firefox and 4 others: The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses\u2026",
      "priority": "High",
      "severity": "low",
      "cvss": 9.8,
      "epss": 0.00897,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6208",
      "url": "https://patchblox.com/security/cve/CVE-2023-6208",
      "title": "Mozilla Firefox ESR and 5 others: When using X11, text selected by the page using the Selection API was erroneously copied into the primary\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00888,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6205",
      "url": "https://patchblox.com/security/cve/CVE-2023-6205",
      "title": "Mozilla Firefox ESR and 5 others: It was possible to cause the use of a MessagePort after it had already been freed, which could potentially\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00874,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1553",
      "url": "https://patchblox.com/security/cve/CVE-2024-1553",
      "title": "Mozilla Firefox ESR and 5 others: Improper Restriction of Operations within the Bounds of a Memory Buffer",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.1,
      "epss": 0.00866,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6204",
      "url": "https://patchblox.com/security/cve/CVE-2023-6204",
      "title": "Mozilla Firefox ESR and 5 others: On some systems\u2014depending on the graphics settings and drivers\u2014it was possible to force an out-of-bounds\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00841,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0750",
      "url": "https://patchblox.com/security/cve/CVE-2024-0750",
      "title": "Mozilla Firefox ESR and 5 others: User Interface (UI) Misrepresentation of Critical Information",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00837,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4576",
      "url": "https://patchblox.com/security/cve/CVE-2023-4576",
      "title": "Integer Overflow in RecordedSourceSurfaceCreation",
      "priority": "High",
      "cvss": 8.6,
      "epss": 0.00821,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0767",
      "url": "https://patchblox.com/security/cve/CVE-2023-0767",
      "title": "Mozilla Firefox and 4 others: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00817,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5721",
      "url": "https://patchblox.com/security/cve/CVE-2023-5721",
      "title": "Mozilla Firefox ESR and 5 others: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00807,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4584",
      "url": "https://patchblox.com/security/cve/CVE-2023-4584",
      "title": "Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00804,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25734",
      "url": "https://patchblox.com/security/cve/CVE-2023-25734",
      "title": "Mozilla Firefox and 4 others: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
      "priority": "High",
      "cvss": 8.1,
      "epss": 0.00775,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4585",
      "url": "https://patchblox.com/security/cve/CVE-2023-4585",
      "title": "Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00774,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4053",
      "url": "https://patchblox.com/security/cve/CVE-2023-4053",
      "title": "Full screen notification obscured by external program",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00768,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37201",
      "url": "https://patchblox.com/security/cve/CVE-2023-37201",
      "title": "Mozilla Firefox and 4 others: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS.",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00755,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37202",
      "url": "https://patchblox.com/security/cve/CVE-2023-37202",
      "title": "Mozilla Firefox and 4 others: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00755,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32213",
      "url": "https://patchblox.com/security/cve/CVE-2023-32213",
      "title": "Mozilla Firefox and 4 others: When reading a file, an uninitialized value could have been used as read limit.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32215",
      "url": "https://patchblox.com/security/cve/CVE-2023-32215",
      "title": "Mozilla Firefox and 4 others: Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst,\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37211",
      "url": "https://patchblox.com/security/cve/CVE-2023-37211",
      "title": "Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00753,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0755",
      "url": "https://patchblox.com/security/cve/CVE-2024-0755",
      "title": "Mozilla Firefox ESR and 5 others: Improper Control of Generation of Code (\u0027Code Injection\u0027)",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00751,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29535",
      "url": "https://patchblox.com/security/cve/CVE-2023-29535",
      "title": "Mozilla Firefox and 4 others: Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00747,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29541",
      "url": "https://patchblox.com/security/cve/CVE-2023-29541",
      "title": "Mozilla Firefox and 4 others: Improper Encoding or Escaping of Output",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00743,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37207",
      "url": "https://patchblox.com/security/cve/CVE-2023-37207",
      "title": "Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00739,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25732",
      "url": "https://patchblox.com/security/cve/CVE-2023-25732",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29539",
      "url": "https://patchblox.com/security/cve/CVE-2023-29539",
      "title": "Mozilla Firefox and 4 others: When handling the filename directive in the Content-Disposition header, the filename would be truncated\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00737,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32207",
      "url": "https://patchblox.com/security/cve/CVE-2023-32207",
      "title": "Mozilla Firefox and 4 others: Authentication Bypass by Spoofing",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00731,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28176",
      "url": "https://patchblox.com/security/cve/CVE-2023-28176",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Write",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00719,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1546",
      "url": "https://patchblox.com/security/cve/CVE-2024-1546",
      "title": "Mozilla Firefox ESR and 5 others: Out-of-bounds Read",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00718,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25735",
      "url": "https://patchblox.com/security/cve/CVE-2023-25735",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00716,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29550",
      "url": "https://patchblox.com/security/cve/CVE-2023-29550",
      "title": "Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 111 and Firefox ESR 102.9.",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00708,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32206",
      "url": "https://patchblox.com/security/cve/CVE-2023-32206",
      "title": "Mozilla Firefox and 4 others: An out-of-bound read could have led to a crash in the RLBox Expat driver.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00703,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23605",
      "url": "https://patchblox.com/security/cve/CVE-2023-23605",
      "title": "Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25737",
      "url": "https://patchblox.com/security/cve/CVE-2023-25737",
      "title": "Mozilla Firefox and 4 others: Incorrect Type Conversion or Cast",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28162",
      "url": "https://patchblox.com/security/cve/CVE-2023-28162",
      "title": "Mozilla Firefox and 4 others: Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29536",
      "url": "https://patchblox.com/security/cve/CVE-2023-29536",
      "title": "Mozilla Firefox and 4 others: An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled\u2026",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00702,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25751",
      "url": "https://patchblox.com/security/cve/CVE-2023-25751",
      "title": "Mozilla Firefox and 4 others: Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.0069,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4583",
      "url": "https://patchblox.com/security/cve/CVE-2023-4583",
      "title": "Browsing Context potentially not cleared when closing Private Window",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00685,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25739",
      "url": "https://patchblox.com/security/cve/CVE-2023-25739",
      "title": "Mozilla Firefox and 4 others: Use After Free",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00682,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25729",
      "url": "https://patchblox.com/security/cve/CVE-2023-25729",
      "title": "Mozilla Firefox and 4 others: Incorrect Authorization",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00681,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1547",
      "url": "https://patchblox.com/security/cve/CVE-2024-1547",
      "title": "Mozilla Firefox ESR and 5 others: Authentication Bypass by Spoofing",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00679,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25728",
      "url": "https://patchblox.com/security/cve/CVE-2023-25728",
      "title": "Mozilla Firefox and 4 others: Observable Discrepancy",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00672,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3417",
      "url": "https://patchblox.com/security/cve/CVE-2023-3417",
      "title": "File Extension Spoofing using the Text Direction Override Character",
      "priority": "High",
      "severity": "high",
      "cvss": 7.5,
      "epss": 0.00669,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25746",
      "url": "https://patchblox.com/security/cve/CVE-2023-25746",
      "title": "Mozilla Thunderbird and 1 other: Out-of-bounds Write",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00668,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4574",
      "url": "https://patchblox.com/security/cve/CVE-2023-4574",
      "title": "Memory corruption in IPC ColorPickerShownCallback",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00663,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4051",
      "url": "https://patchblox.com/security/cve/CVE-2023-4051",
      "title": "Full screen notification obscured by file open dialog",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.0066,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4575",
      "url": "https://patchblox.com/security/cve/CVE-2023-4575",
      "title": "Memory corruption in IPC FilePickerShownCallback",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00657,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4577",
      "url": "https://patchblox.com/security/cve/CVE-2023-4577",
      "title": "Memory corruption in JIT UpdateRegExpStatics",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00652,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25742",
      "url": "https://patchblox.com/security/cve/CVE-2023-25742",
      "title": "Mozilla Firefox and 4 others: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00648,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6206",
      "url": "https://patchblox.com/security/cve/CVE-2023-6206",
      "title": "Mozilla Firefox ESR and 5 others: The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00642,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23598",
      "url": "https://patchblox.com/security/cve/CVE-2023-23598",
      "title": "Arbitrary file read from GTK drag and drop on Linux",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23603",
      "url": "https://patchblox.com/security/cve/CVE-2023-23603",
      "title": "Calls to console.log allowed bypassing Content Security Policy via format directive",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00641,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-3600",
      "url": "https://patchblox.com/security/cve/CVE-2023-3600",
      "title": "Use-after-free in workers",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00634,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0751",
      "url": "https://patchblox.com/security/cve/CVE-2024-0751",
      "title": "Mozilla Firefox ESR and 5 others: Improper Privilege Management",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-50761",
      "url": "https://patchblox.com/security/cve/CVE-2023-50761",
      "title": "Mozilla Thunderbird and 1 other: The signature of a digitally signed S/MIME email message may optionally specify the signature creation\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-50762",
      "url": "https://patchblox.com/security/cve/CVE-2023-50762",
      "title": "Mozilla Thunderbird and 1 other: When processing a PGP/MIME payload that contains digitally signed text, the first paragraph of the text\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00633,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4573",
      "url": "https://patchblox.com/security/cve/CVE-2023-4573",
      "title": "Memory corruption in IPC CanvasTranslator",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00632,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32205",
      "url": "https://patchblox.com/security/cve/CVE-2023-32205",
      "title": "Mozilla Firefox and 4 others: In multiple cases browser prompts could have been obscured by popups controlled by content.",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00631,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4578",
      "url": "https://patchblox.com/security/cve/CVE-2023-4578",
      "title": "Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00622,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25752",
      "url": "https://patchblox.com/security/cve/CVE-2023-25752",
      "title": "Mozilla Firefox and 4 others: When accessing throttled streams, the count of available bytes needed to be checked in the calling function\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.0061,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23599",
      "url": "https://patchblox.com/security/cve/CVE-2023-23599",
      "title": "Malicious command could be hidden in devtools output on Windows",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00601,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23602",
      "url": "https://patchblox.com/security/cve/CVE-2023-23602",
      "title": "Content Security Policy wasn\u0027t being correctly applied to WebSockets in WebWorkers",
      "priority": "High",
      "severity": "medium",
      "cvss": 8.8,
      "epss": 0.00601,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0742",
      "url": "https://patchblox.com/security/cve/CVE-2024-0742",
      "title": "Mozilla Firefox ESR and 5 others: It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally\u2026",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00596,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4581",
      "url": "https://patchblox.com/security/cve/CVE-2023-4581",
      "title": "XLL file extensions were downloadable without warnings",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00574,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29533",
      "url": "https://patchblox.com/security/cve/CVE-2023-29533",
      "title": "Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a combination of \u003Ccode\u003Ewindow.open\u003C/code\u003E,\u2026",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00569,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25730",
      "url": "https://patchblox.com/security/cve/CVE-2023-25730",
      "title": "Mozilla Firefox and 4 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00546,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0616",
      "url": "https://patchblox.com/security/cve/CVE-2023-0616",
      "title": "Mozilla Thunderbird and 1 other: Allocation of Resources Without Limits or Throttling",
      "priority": "High",
      "severity": "important",
      "cvss": 7.5,
      "epss": 0.0049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4580",
      "url": "https://patchblox.com/security/cve/CVE-2023-4580",
      "title": "Push notifications saved to disk unencrypted",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00422,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0430",
      "url": "https://patchblox.com/security/cve/CVE-2023-0430",
      "title": "Mozilla Thunderbird and 1 other: Improper Certificate Validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-0547",
      "url": "https://patchblox.com/security/cve/CVE-2023-0547",
      "title": "Mozilla Thunderbird and 1 other: Improper Certificate Validation",
      "priority": "High",
      "severity": "Important",
      "cvss": 7.5,
      "epss": 0.00372,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-23601",
      "url": "https://patchblox.com/security/cve/CVE-2023-23601",
      "title": "URL being dragged from cross-origin iframe into same tab triggers navigation",
      "priority": "High",
      "severity": "Important",
      "cvss": 8.8,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28164",
      "url": "https://patchblox.com/security/cve/CVE-2023-28164",
      "title": "Mozilla Firefox and 4 others: Origin Validation Error",
      "priority": "High",
      "severity": "medium",
      "cvss": 7.5,
      "epss": 0.00347,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-37208",
      "url": "https://patchblox.com/security/cve/CVE-2023-37208",
      "title": "Mozilla Firefox and 4 others: Unrestricted Upload of File with Dangerous Type",
      "priority": "High",
      "severity": "high",
      "cvss": 8.8,
      "epss": 0.00234,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6209",
      "url": "https://patchblox.com/security/cve/CVE-2023-6209",
      "title": "Mozilla Firefox ESR and 5 others: Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal \u0022/../\u0022 part in\u2026",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.01418,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5171",
      "url": "https://patchblox.com/security/cve/CVE-2023-5171",
      "title": "Mozilla Firefox ESR and 5 others: During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing\u2026",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01116,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5169",
      "url": "https://patchblox.com/security/cve/CVE-2023-5169",
      "title": "Mozilla Firefox ESR and 5 others: A compromised content process could have provided malicious data in a \u0060PathRecording\u0060 resulting in an\u2026",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.01095,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5732",
      "url": "https://patchblox.com/security/cve/CVE-2023-5732",
      "title": "Address bar spoofing via bidirectional characters",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.01049,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-6860",
      "url": "https://patchblox.com/security/cve/CVE-2023-6860",
      "title": "Mozilla Firefox ESR and 5 others: The \u0060VideoBridge\u0060 allowed any content process to use textures produced by remote decoders.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00958,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1548",
      "url": "https://patchblox.com/security/cve/CVE-2024-1548",
      "title": "Mozilla Firefox ESR and 5 others: A website could have obscured the fullscreen notification by using a dropdown select input element.",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00945,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5725",
      "url": "https://patchblox.com/security/cve/CVE-2023-5725",
      "title": "Mozilla Firefox ESR and 5 others: A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could\u2026",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00935,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-5727",
      "url": "https://patchblox.com/security/cve/CVE-2023-5727",
      "title": "Mozilla Firefox ESR and 5 others: The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle\u2026",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 6.5,
      "epss": 0.00829,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-28163",
      "url": "https://patchblox.com/security/cve/CVE-2023-28163",
      "title": "Mozilla Firefox and 4 others: Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00798,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1551",
      "url": "https://patchblox.com/security/cve/CVE-2024-1551",
      "title": "Mozilla Firefox ESR and 5 others: Reliance on Cookies without Validation and Integrity Checking",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00743,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32211",
      "url": "https://patchblox.com/security/cve/CVE-2023-32211",
      "title": "Mozilla Firefox and 4 others: A type checking bug would have led to invalid code being compiled.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00738,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0746",
      "url": "https://patchblox.com/security/cve/CVE-2024-0746",
      "title": "Mozilla Firefox ESR and 5 others: Use After Free",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00738,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0753",
      "url": "https://patchblox.com/security/cve/CVE-2024-0753",
      "title": "Mozilla Firefox ESR and 5 others: In specific HSTS configurations an attacker could have bypassed HSTS on a subdomain.",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.00717,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4052",
      "url": "https://patchblox.com/security/cve/CVE-2023-4052",
      "title": "Mozilla Firefox ESR and 5 others: The Firefox updater created a directory writable by non-privileged users.",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00711,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29548",
      "url": "https://patchblox.com/security/cve/CVE-2023-29548",
      "title": "Mozilla Firefox and 4 others: A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.5,
      "epss": 0.00695,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-32212",
      "url": "https://patchblox.com/security/cve/CVE-2023-32212",
      "title": "Mozilla Firefox and 4 others: An attacker could have positioned a \u0060datalist\u0060 element to obscure the address bar.",
      "priority": "Routine",
      "severity": "medium",
      "cvss": 6.1,
      "epss": 0.00647,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-1945",
      "url": "https://patchblox.com/security/cve/CVE-2023-1945",
      "title": "Mozilla Thunderbird and 1 other: Out-of-bounds Write",
      "priority": "Routine",
      "severity": "important",
      "cvss": 6.5,
      "epss": 0.00644,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-25738",
      "url": "https://patchblox.com/security/cve/CVE-2023-25738",
      "title": "Mozilla Firefox and 4 others: Out-of-bounds Read",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00635,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0747",
      "url": "https://patchblox.com/security/cve/CVE-2024-0747",
      "title": "Mozilla Firefox ESR and 5 others: Protection Mechanism Failure",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.5,
      "epss": 0.006,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29545",
      "url": "https://patchblox.com/security/cve/CVE-2023-29545",
      "title": "Mozilla Firefox and 4 others: Similar to CVE-2023-28163, this time when choosing \u0027Save Link As\u0027, suggested filenames containing environment\u2026",
      "priority": "Routine",
      "cvss": 6.5,
      "epss": 0.00584,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1550",
      "url": "https://patchblox.com/security/cve/CVE-2024-1550",
      "title": "Mozilla Firefox ESR and 5 others: Improper Restriction of Rendered UI Layers or Frames",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00575,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-1549",
      "url": "https://patchblox.com/security/cve/CVE-2024-1549",
      "title": "Mozilla Firefox ESR and 5 others: If a website set a large custom cursor, portions of the cursor could have overlapped with the permission\u2026",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00529,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-0749",
      "url": "https://patchblox.com/security/cve/CVE-2024-0749",
      "title": "Mozilla Firefox ESR and 5 others: Origin Validation Error",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00336,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2024-3861",
      "url": "https://patchblox.com/security/cve/CVE-2024-3861",
      "title": "Mozilla Firefox ESR and 5 others: If an AlignedBuffer were assigned to itself, the subsequent self-move could result in an incorrect reference\u2026",
      "priority": "Routine",
      "severity": "Important",
      "cvss": 6.1,
      "epss": 0.00228,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-4054",
      "url": "https://patchblox.com/security/cve/CVE-2023-4054",
      "title": "Mozilla Firefox ESR and 4 others: When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.",
      "priority": "Routine",
      "severity": "Medium",
      "cvss": 5.5,
      "epss": 0.00208,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2023-29532",
      "url": "https://patchblox.com/security/cve/CVE-2023-29532",
      "title": "Mozilla Firefox and 4 others: A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing\u2026",
      "priority": "Routine",
      "cvss": 5.5,
      "epss": 0.00185,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-10T13:56:55Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}