SUSE-SU-2023:0835-1: MozillaFirefox&distro=openSUSE Leap 15.4

CVSS: UnknownPublished
Published 21-03-2023Last modified 04-02-2026
Open JSON

Vulnerability summary

SUSE-SU-2023:0835-1 is a vulnerability in MozillaFirefox&distro=openSUSE Leap 15.4 with no CVSS score yet.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
Not scored
0%100%
No EPSS score yet
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 13 · Downstream 0 · Related 13
CVE-2023-25748CVE-2023-25749CVE-2023-25750CVE-2023-25751CVE-2023-25752CVE-2023-28159

Timeline

  1. 21-03-2023
    PublishedVulnerability first disclosed.
  2. 04-02-2026
    Last modifiedVulnerability information updated.

Description

Security update for MozillaFirefox This update for MozillaFirefox fixes the following issues: Update to version 102.9.0 ESR (bsc#1209173): - CVE-2023-28159: Fullscreen Notification could have been hidden by download popups on Android - CVE-2023-25748: Fullscreen Notification could have been hidden by window prompts on Android - CVE-2023-25749: Firefox for Android may have opened third-party apps without a prompt - CVE-2023-25750: Potential ServiceWorker cache leak during private browsing mode - CVE-2023-25751: Incorrect code generation during JIT compilation - CVE-2023-28160: Redirect to Web Extension files may have leaked local path - CVE-2023-28164: URL being dragged from a removed cross-origin iframe into the same tab triggered navigation - CVE-2023-28161: One-time permissions granted to a local file were extended to other local files loaded in the same tab - CVE-2023-28162: Invalid downcast in Worklets - CVE-2023-25752: Potential out-of-bounds when accessing throttled streams - CVE-2023-28163: Windows Save As dialog resolved environment variables - CVE-2023-28176: Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9 - CVE-2023-28177: Memory safety bugs fixed in Firefox 111

CVSS metrics

Risk metrics not yet published.

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Suse11 products
  • MozillaFirefox&distro=SUSE Enterprise Storage 7< 102.9.0-150200.152.81.1
  • MozillaFirefox&distro=SUSE Enterprise Storage 7.1< 102.9.0-150200.152.81.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS< 102.9.0-150200.152.81.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS< 102.9.0-150200.152.81.1
  • MozillaFirefox&distro=SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS< 102.9.0-150200.152.81.1
Opensuse1 product
  • MozillaFirefox&distro=openSUSE Leap 15.4< 102.9.0-150200.152.81.1

2 vendors · 12 products

References

15 links
Show all 15 references