High Threat Security Alert (A23-09-10): Vulnerability in Firefox
13 September 2023
Mozilla has published the advisory (MFSA2023-40) to address a vulnerability in Firefox browser. A remote attacker could entice a user running a vulnerable browser to visit a web page with specially crafted content to exploit the vulnerability.
Reports indicated that the vulnerability (CVE-2023-4863) is being exploited in the wild. Users are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.
Firefox Windows versions prior to version 117.0.1
Firefox ESR Windows versions prior to version 102.15.1, 115.2.1
Successful exploitation of the vulnerability could lead to remote code execution on an affected system.
Mozilla has released new versions of the product to address the issues and they can be downloaded at the following URLs: