The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaMonkey before 2.20 does not properly address the possibility of an XBL scope bypass resulting from non-native arguments in XBL function calls, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks by leveraging access to an unprivileged object.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade thunderbirdUpgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade firefoxUpgrade seamonkeyUpgrade linux-firefox | Dec 10, 2025 | Aug 8, 2013 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/seamonkey-bin.Upgrade www-client/seamonkey.Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade mail-client/thunderbird. | Oct 30, 2017 | Aug 6, 2013 |
| Mfsa2013 70 | — | Upgrade to Mozilla Firefox version 23.0Upgrade to the latest version of Mozilla Firefox | Aug 7, 2013 | Aug 6, 2013 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 2.20Upgrade to the latest version of Mozilla SeaMonkey | Dec 8, 2014 | Aug 6, 2013 |
| Suse | — | Upgrade xulrunner-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade seamonkey-dom-inspectorUpgrade mozilla-nsprUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade MozillaThunderbird-translations-commonUpgrade mozilla-nspr-develUpgrade MozillaFirefox-translations-commonUpgrade seamonkey-venkmanUpgrade xulrunnerUpgrade libsoftokn3-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-jsUpgrade MozillaThunderbird-develUpgrade MozillaThunderbirdUpgrade mozilla-nss-sysinitUpgrade libfreebl3Upgrade libfreebl3-32bitUpgrade xulrunner-develUpgrade libsoftokn3Upgrade mozilla-nss-develUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-toolsUpgrade seamonkey-translations-commonUpgrade xulrunner-32bitUpgrade seamonkey-translations-otherUpgrade MozillaThunderbird-buildsymbolsUpgrade mozilla-nspr-32bitUpgrade seamonkeyUpgrade mozilla-nss-sysinit-32bitUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade mozilla-nss-32bitUpgrade seamonkey-ircUpgrade mozilla-js-32bitUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade enigmail | Feb 17, 2015 | Aug 6, 2013 |
| Ubuntu | — | Upgrade firefox | Nov 8, 2024 | Aug 7, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub