CRITICAL 9.8 Microsoft

CVE-2023-5176

Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

Microsoft Security Update 2023-Sep: Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.

Affected Products

References

Published: 2023-09-12 · Source: Microsoft · Feed updated: 2026-09-03
This critical severity vulnerability with a CVSS score of 9.8 was published on 2023-09-12 via Microsoft. Affected: azl3 mozjs 102.15.1-1 on Azure Linux 3.0.

Risk Timeline

CVE Disclosed2023-09-12 · 1086 days ago

Remediation Resources

Official Advisory
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-5176
NVD / MITRE
nvd.nist.gov/vuln/detail/CVE-2023-5176

Related Vulnerabilities

CVETitleSeverityCVSS
CVE-2025-62168 PoCSquid vulnerable to information disclosure via authentication credential leakageCRITICAL10.0
CVE-2026-39821Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/neCRITICAL10.0
CVE-2026-42960Possible cache poisoning via promiscuous records for the authority sectionCRITICAL10.0
CVE-2026-46595Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/xCRITICAL10.0
CVE-2026-7374Kubevirt: kubevirt virt-handler: privilege escalation and node compromise via syCRITICAL9.9
CVE-2026-80607tracing/probes: Remove WARN_ON_ONCE from parse_btf_argCRITICAL9.8
vulnfeed aggregates 9119 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.