In the Linux kernel through 6.3.1 a use-after-free in Netfilter nf_tables when processing batch requests can be abused to perform arbitrary read and write operations on kernel memory. Unprivileged local users can obtain root privileges. This occurs because anonymous sets are mishandled.

Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113.

An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

An issue was discovered in the Linux kernel through 6.1-rc8. dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() and will cause the NULL Pointer Dereference.

Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113.

Chromium: CVE-2023-3217 Use after free in WebXR

Chromium: CVE-2023-3216 Type Confusion in V8

Chromium: CVE-2023-3215 Use after free in WebRTC

Chromium: CVE-2023-3214 Use after free in Autofill payments

A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel. It occurs on corrupt gfs2 file systems when the evict code tries to reference the journal descriptor structure after it has been freed and set to NULL. A privileged local user could use this flaw to cause a kernel panic.

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability

HTTP.sys Denial of Service Vulnerability

Microsoft Failover Cluster Information Disclosure Vulnerability

etcd key name can be accessed via LeaseTimeToLive API

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

Active Template Library Elevation of Privilege Vulnerability

Volume Shadow Copy Elevation of Privilege Vulnerability