CVE-2023-4575

Summary

CVE-2023-4575 is a vulnerability affecting Firefox versions below 117, Firefox ESR below 102.15, Firefox ESR below 115.2, Thunderbird versions below 102.15, and Thunderbird versions below 115.2. This issue lies in the creation of multiple callbacks for showing the File Picker window over Inter-Process Communication (IPC). When one callback is finished, all remaining callbacks could be simultaneously destroyed. This use-after-free condition, which arises from this inconsistency, can potentially result in a crash that could be exploited.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.