Offscreen Canvas did not properly track cross-origin tainting, which could have been used to access image data from another site in violation of same-origin policy. This vulnerability affects Firefox < 116, Firefox ESR < 102.14, and Firefox ESR < 115.1.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade firefox-x11 | Aug 8, 2023 | Aug 1, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade firefox | Aug 22, 2024 | Aug 1, 2023 |
| Amazon Linux Ami 2 | — | Upgrade firefox-debuginfoUpgrade firefox | Sep 28, 2023 | Aug 1, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Aug 4, 2023 | Aug 1, 2023 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Aug 8, 2023 | Aug 1, 2023 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird.Upgrade mail-client/thunderbird-bin. | Feb 21, 2024 | Aug 1, 2023 |
| Mfsa2023 29 | — | Upgrade to Mozilla Firefox version 116.0Upgrade to the latest version of Mozilla Firefox | Aug 2, 2023 | Aug 1, 2023 |
| Mfsa2023 30 | — | Upgrade to Mozilla Firefox ESR version 102.14Upgrade to the latest version of Mozilla Firefox | Aug 2, 2023 | Aug 1, 2023 |
| Mfsa2023 31 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 115.1 | Aug 2, 2023 | Aug 1, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.1Upgrade to the latest version of Mozilla Thunderbird | Aug 3, 2023 | Aug 1, 2023 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox-x11Upgrade firefox | Aug 4, 2023 | Aug 1, 2023 |
| Redhat_linux | — | Upgrade thunderbirdNo solution existsUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade firefox-x11Upgrade thunderbird-debugsource | Aug 4, 2023 | Aug 1, 2023 |
| Rocky_linux | — | Upgrade thunderbirdUpgrade firefox-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-x11Upgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbird-debugsource | Mar 5, 2024 | Aug 1, 2023 |
| Suse | — | Upgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox | Aug 3, 2023 | Aug 1, 2023 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Aug 3, 2023 | Aug 1, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub