CVE-2023-37209

Summary

CVE-2023-37209 is a use-after-free vulnerability affecting Firefox versions below 115. In the `NotifyOnHistoryReload` function, a `LoadingSessionHistoryEntry` object is freed, but a reference to this object remains. Subsequently, this reference is reused, leading to a potentially exploitable condition. Exploitation could result in arbitrary code execution or other malicious activities. Users are advised to update Firefox to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.