vulnerability

Ubuntu: (Multiple Advisories) (CVE-2023-37208): Firefox vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Jul 5, 2023

Added

Jul 6, 2023

Modified

Mar 27, 2026

Description

When opening Diagcab files, Firefox did not warn the user that these files may contain malicious code. This vulnerability affects Firefox < 115, Firefox ESR < 102.13, and Thunderbird < 102.13.

Solutions

ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird

References

CVE-2023-37208
https://attackerkb.com/topics/CVE-2023-37208
CWE-434
EUVD-EUVD-2023-41128
UBUNTU-USN-6201-1
UBUNTU-USN-6214-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-41128

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report