VDB

GCVE-VVD-MAGEIA-2023-308

GCVE-VVD-MAGEIA-2023-308
Advisory Published
Vulnetix · Advisory published November 6, 2023
The updated packages fix security vulnerabilities: Queued up rendering could have allowed websites to clickjack. (CVE-2023-5721) Address bar spoofing via bidirectional characters. (CVE-2023-5732) Large WebGL draw could have led to a crash. (CVE-2023-5724) WebExtensions could open arbitrary URLs. (CVE-2023-5725) Improper object tracking during GC in the JavaScript engine could have led to a crash. (CVE-2023-5728) Memory safety bugs fixed in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4.1. (CVE-2023-5730)

Affected Products

VendorProductVersionsPlatforms
Mageiafirefox0 (affected), 115.4.0-1.mga9 (unaffected)
Mageiafirefox-l10n0 (affected), 115.4.0-1.mga9 (unaffected)
Mageianss0 (affected), 3.94.0-1.mga9 (unaffected)

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›