Mozilla Firefox (en-US) 115.0
Mozilla Firefox (en-US) 115.0, released July 4, 2023, fixes 13 CVEs in Mozilla Firefox (en-US). None of them is reported as exploited. Patch Radar priority: High. The latest Mozilla Firefox (en-US) is 159.0, which also fixes every one of these CVEs.
Superseded. The latest Mozilla Firefox (en-US) is 159.0, which also fixes every CVE on this page. Install that instead.
Priority of the 13 CVEs
Applies to
| Product | Version |
|---|---|
| Mozilla Firefox (en-US) | 115.0 |
CVEs this fix closes
| Priority | CVE | Title | CVSS | EPSS | Exploitation |
|---|---|---|---|---|---|
| High | CVE-2023-37201 | Mozilla Firefox and 4 others: An attacker could have triggered a use-after-free condition when creating a WebRTC connection over HTTPS. | 8.8 | 0.0076 | None reported |
| High | CVE-2023-37202 | Mozilla Firefox and 4 others: Cross-compartment wrappers wrapping a scripted proxy could have caused objects from other compartments… | 8.8 | 0.0076 | None reported |
| High | CVE-2023-37211 | Mozilla Firefox and 4 others: Memory safety bugs present in Firefox 114, Firefox ESR 102.12, and Thunderbird 102.12. | 8.8 | 0.0075 | None reported |
| High | CVE-2023-37207 | Mozilla Firefox and 4 others: A website could have obscured the fullscreen notification by using a URL with a scheme handled by an… | 8.8 | 0.0074 | None reported |
| High | CVE-2023-37212 | Mozilla Firefox and 2 others: Memory safety bugs present in Firefox 114. | 8.8 | 0.0064 | None reported |
| High | CVE-2023-37209 | Mozilla Firefox and 2 others: A use-after-free condition existed in `NotifyOnHistoryReload` where a `LoadingSessionHistoryEntry` object… | 8.8 | 0.0059 | None reported |
| High | CVE-2023-37203 | Mozilla Firefox and 2 others: Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed… | 7.8 | 0.0025 | None reported |
| High | CVE-2023-37208 | Mozilla Firefox and 4 others: Unrestricted Upload of File with Dangerous Type | 8.8 | 0.0023 | None reported |
| Routine | CVE-2023-37206 | Mozilla Firefox and 2 others: Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive… | 6.5 | 0.0072 | None reported |
| Routine | CVE-2023-3482 | Mozilla Firefox and 2 others: When Firefox is configured to block storage of all cookies, it was still possible to store data in localstorage… | 6.5 | 0.0058 | None reported |
| Routine | CVE-2023-37204 | Mozilla Firefox and 2 others: A website could have obscured the fullscreen notification by using an option element by introducing lag… | 6.5 | 0.0052 | None reported |
| Routine | CVE-2023-37205 | Mozilla Firefox and 2 others: The use of RTL Arabic characters in the address bar may have allowed for URL spoofing. | 6.5 | 0.0052 | None reported |
| Routine | CVE-2023-37210 | Mozilla Firefox and 2 others: Origin Validation Error | 6.5 | 0.0028 | None reported |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.