Record status Published
Identifier year (not publication year) 2023
Source publication Aug 1, 2023
Source updated Oct 22, 2024
Imported by cveboard Oct 24, 2026
CNA source text (English) When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.
*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 102.14, Firefox ESR < 115.1, Thunderbird < 102.14, and Thunderbird < 115.1.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Firefox
Vendor Mozilla
Product Firefox
Platforms Unknown
Default status Unknown
Firefox · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 116 Unavailable None listed
Firefox ESR
Vendor Mozilla
Product Firefox ESR
Platforms Unknown
Default status Unknown
Firefox ESR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 102.14 Unavailable None listed
Firefox ESR
Vendor Mozilla
Product Firefox ESR
Platforms Unknown
Default status Unknown
Firefox ESR · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 115.1 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 102.14 Unavailable None listed
Thunderbird
Vendor Mozilla
Product Thunderbird
Platforms Unknown
Default status Unknown
Thunderbird · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) unspecified affectedcustom 115.1 Unavailable None listed