Поиск уязвимостей
Количество 17
Количество 17
CVE-2023-4052
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.
CVE-2023-4052
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.
CVE-2023-4052
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.
CVE-2023-4052
The Firefox updater created a directory writable by non-privileged use ...
GHSA-gjqm-928w-fr7f
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116 and Firefox ESR < 115.1.
BDU:2023-04499
Уязвимость загрузчика обновлений браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird операционных систем Windows, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов
SUSE-SU-2023:3228-1
Security update for MozillaThunderbird
SUSE-SU-2023:3163-1
Security update for MozillaFirefox
SUSE-SU-2023:3162-1
Security update for MozillaFirefox
SUSE-SU-2023:3161-1
Security update for MozillaFirefox
ALT-PU-2023-5836
ALT-PU-2023-5836: package `thunderbird` update to version 115.2.2-alt1
ALT-PU-2023-8717
ALT-PU-2023-8717: package `firefox` update to version 116.0-alt1
ALT-PU-2023-5754
ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1
ALT-PU-2024-3860
ALT-PU-2024-3860: package `thunderbird` update to version 115.8.1-alt1
ALT-PU-2023-6436
ALT-PU-2023-6436: package `firefox-esr` update to version 115.3.1-alt4
ALT-PU-2024-4241
ALT-PU-2024-4241: package `firefox` update to version 118.0.2-alt0.p10.1
ALT-PU-2024-13898
ALT-PU-2024-13898: package `firefox-esr` update to version 128.3.1-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-4052 The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-4052 The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1. | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-4052 The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-4052 The Firefox updater created a directory writable by non-privileged use ... | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
| GHSA-gjqm-928w-fr7f The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116 and Firefox ESR < 115.1. | CVSS3: 6.5 | 1% Низкий | больше 3 лет назад |
 | BDU:2023-04499 Уязвимость загрузчика обновлений браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird операционных систем Windows, позволяющая нарушителю получить доступ на чтение, изменение или удаление файлов | CVSS3: 6.1 | 1% Низкий | больше 3 лет назад |
 | SUSE-SU-2023:3228-1 Security update for MozillaThunderbird | больше 3 лет назад | ||
| SUSE-SU-2023:3163-1 Security update for MozillaFirefox | больше 3 лет назад | ||
| SUSE-SU-2023:3162-1 Security update for MozillaFirefox | больше 3 лет назад | ||
| SUSE-SU-2023:3161-1 Security update for MozillaFirefox | больше 3 лет назад | ||
| ALT-PU-2023-5836 ALT-PU-2023-5836: package `thunderbird` update to version 115.2.2-alt1 | CVSS3: 9.8 | около 3 лет назад | |
| ALT-PU-2023-8717 ALT-PU-2023-8717: package `firefox` update to version 116.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-5754 ALT-PU-2023-5754: package `firefox-esr` update to version 115.2.1-alt1 | CVSS3: 10 | около 3 лет назад | |
| ALT-PU-2024-3860 ALT-PU-2024-3860: package `thunderbird` update to version 115.8.1-alt1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2023-6436 ALT-PU-2023-6436: package `firefox-esr` update to version 115.3.1-alt4 | CVSS3: 10 | около 3 лет назад | |
| ALT-PU-2024-4241 ALT-PU-2024-4241: package `firefox` update to version 118.0.2-alt0.p10.1 | CVSS3: 9.8 | больше 2 лет назад | |
| ALT-PU-2024-13898 ALT-PU-2024-13898: package `firefox-esr` update to version 128.3.1-alt1 | CVSS3: 9.8 | около 2 лет назад |
Уязвимостей на страницу