CRITICAL 9.8 Microsoft
CVE-2023-4058
Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116.
Microsoft Security Update 2023-Aug: Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116.
Affected Products
- azl3 mozjs 102.15.1-1 on Azure Linux 3.0
References
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4058
- https://nvd.nist.gov/vuln/detail/CVE-2023-4058
This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-08-08 via Microsoft. Affected: azl3 mozjs 102.15.1-1 on Azure Linux 3.0.
Risk Timeline
CVE Disclosed2023-08-08 · 1179 days ago
Remediation Resources
Official Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4058NVD / MITRE
nvd.nist.gov/vuln/detail/CVE-2023-4058Related Vulnerabilities
| CVE | Title | Severity | CVSS |
|---|---|---|---|
| CVE-2026-110264 | Integer Overflow or Wraparound in GitLab | CRITICAL | 10.0 |
| CVE-2026-94603 | Podman: The `podman run` command can be instructed to disable almost all sandbox | CRITICAL | 10.0 |
| CVE-2022-36648 | The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in | CRITICAL | 10.0 |
| CVE-2026-77524 | KEDA: Privilege escalation from namespace admin to cluster admin via KEDA Trigge | CRITICAL | 9.9 |
| CVE-2026-115384 | Wasmtime 39.0.0 before 48.0.4 and 49.0.0 before 49.0.2 Stack Buffer Overflow | CRITICAL | 9.9 |
| CVE-2026-44210 | Kata Containers have VM Escape via virtiofsd Argument Injection through Default- | CRITICAL | 9.9 |
vulnfeed aggregates 17475 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.