CVE-2023-3600
CVSS 3.1 Score 7.3 of 10 (high)
Details
Published Jul 12, 2023
Updated: Jul 31, 2023
CWE ID 426
Summary
CVE-2023-3600 represents a use-after-free vulnerability identified in Firefox versions below 115.0.2, Firefox ESR below 115.0.2, and Thunderbird below 115.0.1. During the worker lifecycle, this issue could lead to a potentially exploitable crash. The use-after-free condition occurs when memory that has already been freed is referenced, creating an opportunity for attackers to execute malicious code. These impacted applications need to be updated as soon as possible to mitigate the risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share