CVE-2023-3600

CVSS 3.1 Score 7.3 of 10 (high)

Details

Published Jul 12, 2023
Updated: Jul 31, 2023
CWE ID 426

Summary

CVE-2023-3600 represents a use-after-free vulnerability identified in Firefox versions below 115.0.2, Firefox ESR below 115.0.2, and Thunderbird below 115.0.1. During the worker lifecycle, this issue could lead to a potentially exploitable crash. The use-after-free condition occurs when memory that has already been freed is referenced, creating an opportunity for attackers to execute malicious code. These impacted applications need to be updated as soon as possible to mitigate the risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share