CVE-2023-4574
Published: Sep 11, 2023
Modified: Dec 18, 2025
Description
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.
| Vendor | Product | Versions |
|---|---|---|
Mozilla | Firefox | affected unspecified - < 117 |
Mozilla | Firefox ESR | affected unspecified - < 102.15 |
Mozilla | Firefox ESR | affected unspecified - < 115.2 |
Mozilla | Thunderbird | affected unspecified - < 102.15 |
Mozilla | Thunderbird | affected unspecified - < 115.2 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now