Skip to content
OpenAdvisories
Unscored USN-6218-1 1 CVE

firefox vulnerability

Published Jul 12, 2023 · Updated Apr 22, 2026

Ecosystem: Ubuntu

Summary

A use-after-free was discovered in Firefox when handling workers. An
attacker could potentially exploit this to cause a denial of service, or
execute arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS firefox 115.0.2+build1-0ubuntu0.20.04.1

Vulnerabilities 1

  • Unscored —
    CVE-2023-3600

    Use-after-free in workers

    During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affects Firefox < 115.0.2, Firefox ESR < 115.0.2, and Thunderbird < 115.0.1.

    Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu Alpine

References

  • report
    https://ubuntu.com/security/CVE-2023-3600