CRITICAL 9.8 Microsoft

CVE-2023-4058

Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116.

Microsoft Security Update 2023-Aug: Memory safety bugs present in Firefox 115. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 116.

Affected Products

azl3 mozjs 102.15.1-1 on Azure Linux 3.0

References

Published: 2023-08-08 · Source: Microsoft · Feed updated: 2026-08-14

This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-08-08 via Microsoft. Affected: azl3 mozjs 102.15.1-1 on Azure Linux 3.0.

Risk Timeline

CVE Disclosed2023-08-08 · 1102 days ago

Remediation Resources

Official Advisory

msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4058

NVD / MITRE

nvd.nist.gov/vuln/detail/CVE-2023-4058

Related Vulnerabilities

CVE	Title	Severity	CVSS
CVE-2026-42960	Possible cache poisoning via promiscuous records for the authority section	CRITICAL	10.0
CVE-2026-46595	Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x	CRITICAL	10.0
CVE-2026-39821	Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/ne	CRITICAL	10.0
CVE-2026-40175	Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain	CRITICAL	10.0
CVE-2024-24576 PoC	Rusts's `std::process::Command` did not properly escape arguments of batch files	CRITICAL	10.0
CVE-2022-36648	The hardware emulation in the of_dpa_cmd_add_l2_flood of rocker device model in	CRITICAL	10.0

vulnfeed aggregates 10939 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.