csaf_suse - suse-su-2023:2211-1

suse-su-2023:2211-1

Vulnerability from csaf_suse

Published

2023-05-16 08:46

Modified

2023-05-16 08:46

Summary

Security update for MozillaThunderbird

Notes

Title of the patch

Security update for MozillaThunderbird

Description of the patch

This update for MozillaThunderbird fixes the following issues: Update to version 102.11: - fixed: During Account Setup, the 'Checking password...' message was not removed after a failure (bmo#1826022) - fixed: Miscellaneous UI fixes (bmo#1827070) - fixed: Security fixes MFSA 2023-18 (bsc#1211175) - CVE-2023-32205: Browser prompts could have been obscured by popups - CVE-2023-32206: Crash in RLBox Expat driver - CVE-2023-32207: Potential permissions request bypass via clickjacking - CVE-2023-32211: Content process crash due to invalid wasm code - CVE-2023-32212: Potential spoof due to obscured address bar - CVE-2023-32213: Potential memory corruption in FileReader::DoReadData() - CVE-2023-32214: Potential DoS via exposed protocol handlers - CVE-2023-32215: Memory safety bugs fixed in Thunderbird 102.11

Patchnames

SUSE-2023-2211,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2211,SUSE-SLE-Product-WE-15-SP4-2023-2211,openSUSE-SLE-15.4-2023-2211

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for MozillaThunderbird",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for MozillaThunderbird fixes the following issues:\n\nUpdate to version 102.11:\n\n- fixed: During Account Setup, the \u0027Checking password...\u0027 message was not removed after a failure (bmo#1826022)\n- fixed: Miscellaneous UI fixes (bmo#1827070)\n- fixed: Security fixes MFSA 2023-18 (bsc#1211175)\n- CVE-2023-32205: Browser prompts could have been obscured by popups\n- CVE-2023-32206: Crash in RLBox Expat driver\n- CVE-2023-32207: Potential permissions request bypass via clickjacking\n- CVE-2023-32211: Content process crash due to invalid wasm code\n- CVE-2023-32212: Potential spoof due to obscured address bar\n- CVE-2023-32213: Potential memory corruption in FileReader::DoReadData()\n- CVE-2023-32214: Potential DoS via exposed protocol handlers\n- CVE-2023-32215: Memory safety bugs fixed in Thunderbird 102.11\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2023-2211,SUSE-SLE-Module-Packagehub-Subpackages-15-SP4-2023-2211,SUSE-SLE-Product-WE-15-SP4-2023-2211,openSUSE-SLE-15.4-2023-2211",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_2211-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2023:2211-1",
        "url": "https://www.suse.com/support/update/announcement/2023/suse-su-20232211-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2023:2211-1",
        "url": "https://lists.suse.com/pipermail/sle-updates/2023-May/029422.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1211175",
        "url": "https://bugzilla.suse.com/1211175"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32205 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32205/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32206 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32206/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32207 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32207/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32211 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32211/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32212 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32212/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32213 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32213/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32214 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32214/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2023-32215 page",
        "url": "https://www.suse.com/security/cve/CVE-2023-32215/"
      }
    ],
    "title": "Security update for MozillaThunderbird",
    "tracking": {
      "current_release_date": "2023-05-16T08:46:23Z",
      "generator": {
        "date": "2023-05-16T08:46:23Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2023:2211-1",
      "initial_release_date": "2023-05-16T08:46:23Z",
      "revision_history": [
        {
          "date": "2023-05-16T08:46:23Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
                  "product_id": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
                  "product_id": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-102.11.0-150200.8.116.1.i686",
                "product": {
                  "name": "MozillaThunderbird-102.11.0-150200.8.116.1.i686",
                  "product_id": "MozillaThunderbird-102.11.0-150200.8.116.1.i686"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.i686",
                "product": {
                  "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.i686",
                  "product_id": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.i686"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.i686",
                "product": {
                  "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.i686",
                  "product_id": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.i686"
                }
              }
            ],
            "category": "architecture",
            "name": "i686"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
                  "product_id": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
                "product": {
                  "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
                  "product_id": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
                  "product_id": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
                  "product_id": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
                "product": {
                  "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
                  "product_id": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
                  "product_id": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
                "product": {
                  "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
                  "product_id": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                  "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:packagehub:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Workstation Extension 15 SP4",
                "product": {
                  "name": "SUSE Linux Enterprise Workstation Extension 15 SP4",
                  "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-we:15:sp4"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "openSUSE Leap 15.4",
                "product": {
                  "name": "openSUSE Leap 15.4",
                  "product_id": "openSUSE Leap 15.4",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:opensuse:leap:15.4"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64 as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x as component of SUSE Linux Enterprise Module for Package Hub 15 SP4",
          "product_id": "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
        "relates_to_product_reference": "SUSE Linux Enterprise Module for Package Hub 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64 as component of SUSE Linux Enterprise Workstation Extension 15 SP4",
          "product_id": "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Workstation Extension 15 SP4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64 as component of openSUSE Leap 15.4",
          "product_id": "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        },
        "product_reference": "MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 15.4"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2023-32205",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32205"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32205",
          "url": "https://www.suse.com/security/cve/CVE-2023-32205"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32205"
    },
    {
      "cve": "CVE-2023-32206",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32206"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32206",
          "url": "https://www.suse.com/security/cve/CVE-2023-32206"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32206"
    },
    {
      "cve": "CVE-2023-32207",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32207"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32207",
          "url": "https://www.suse.com/security/cve/CVE-2023-32207"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32207"
    },
    {
      "cve": "CVE-2023-32211",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32211"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32211",
          "url": "https://www.suse.com/security/cve/CVE-2023-32211"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32211"
    },
    {
      "cve": "CVE-2023-32212",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32212"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An attacker could have positioned a \u003ccode\u003edatalist\u003c/code\u003e element to obscure the address bar. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32212",
          "url": "https://www.suse.com/security/cve/CVE-2023-32212"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.3,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32212"
    },
    {
      "cve": "CVE-2023-32213",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32213"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32213",
          "url": "https://www.suse.com/security/cve/CVE-2023-32213"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32213"
    },
    {
      "cve": "CVE-2023-32214",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32214"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.\n*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32214",
          "url": "https://www.suse.com/security/cve/CVE-2023-32214"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32214"
    },
    {
      "cve": "CVE-2023-32215",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2023-32215"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
          "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2023-32215",
          "url": "https://www.suse.com/security/cve/CVE-2023-32215"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "SUSE Linux Enterprise Module for Package Hub 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "SUSE Linux Enterprise Workstation Extension 15 SP4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-common-102.11.0-150200.8.116.1.x86_64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.aarch64",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.ppc64le",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.s390x",
            "openSUSE Leap 15.4:MozillaThunderbird-translations-other-102.11.0-150200.8.116.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2023-05-16T08:46:23Z",
          "details": "critical"
        }
      ],
      "title": "CVE-2023-32215"
    }
  ]
}

CVE-2023-32206 (GCVE-0-2023-32206)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

CWE

Crash in RLBox Expat driver

Summary

An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1824892
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.930Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1824892"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Irvan Kurniawan"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Crash in RLBox Expat driver",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:11.734Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1824892"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32206",
    "datePublished": "2023-06-02T00:00:00",
    "dateReserved": "2023-05-04T00:00:00",
    "dateUpdated": "2025-05-27T16:53:11.734Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32213 (GCVE-0-2023-32213)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

CWE

Potential memory corruption in FileReader::DoReadData()

Summary

When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1826666
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.989Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826666"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ronald Crane"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential memory corruption in FileReader::DoReadData()",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:13.932Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826666"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32213",
    "datePublished": "2023-06-02T00:00:00",
    "dateReserved": "2023-05-04T00:00:00",
    "dateUpdated": "2025-05-27T16:53:13.932Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32211 (GCVE-0-2023-32211)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

CWE

Content process crash due to invalid wasm code

Summary

A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1823379
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.945Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823379"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-32211",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-10-15T17:09:05.363071Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-10-15T17:11:58.382Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "P1umer and xmzyshypnc"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Content process crash due to invalid wasm code",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:12.745Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1823379"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32211",
    "datePublished": "2023-06-02T00:00:00",
    "dateReserved": "2023-05-04T00:00:00",
    "dateUpdated": "2025-05-27T16:53:12.745Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32215 (GCVE-0-2023-32215)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

CWE

Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11

Summary

Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540883%2C1751943%2C1814856%2C1820210%2C1821480%2C1827019%2C1827024%2C1827144%2C1827359%2C1830186
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.975Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540883%2C1751943%2C1814856%2C1820210%2C1821480%2C1827019%2C1827024%2C1827144%2C1827359%2C1830186"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Mozilla developers and community"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112 and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:14.999Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "name": "Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11",
          "url": "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1540883%2C1751943%2C1814856%2C1820210%2C1821480%2C1827019%2C1827024%2C1827144%2C1827359%2C1830186"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32215",
    "datePublished": "2023-06-02T00:00:00",
    "dateReserved": "2023-05-04T00:00:00",
    "dateUpdated": "2025-05-27T16:53:14.999Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32205 (GCVE-0-2023-32205)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

CWE

Browser prompts could have been obscured by popups

Summary

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1753339
	https://bugzilla.mozilla.org/show_bug.cgi?id=1753341
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.648Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1753339"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1753341"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Alesandro Ortiz"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Browser prompts could have been obscured by popups",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:11.148Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1753339"
        },
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1753341"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32205",
    "datePublished": "2023-06-02T00:00:00",
    "dateReserved": "2023-05-04T00:00:00",
    "dateUpdated": "2025-05-27T16:53:11.148Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32212 (GCVE-0-2023-32212)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

CWE

Potential spoof due to obscured address bar

Summary

An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1826622
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.937Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826622"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2023-32212",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-25T19:21:37.346753Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-11-25T19:21:48.088Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Hafiizh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "An attacker could have positioned a \u003ccode\u003edatalist\u003c/code\u003e element to obscure the address bar. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "An attacker could have positioned a `datalist` element to obscure the address bar. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential spoof due to obscured address bar",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:13.344Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826622"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32212",
    "datePublished": "2023-06-02T00:00:00",
    "dateReserved": "2023-05-04T00:00:00",
    "dateUpdated": "2025-05-27T16:53:13.344Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32214 (GCVE-0-2023-32214)

Vulnerability from cvelistv5

Published

2023-06-19 09:38

Modified

2025-05-27 16:53

Severity ?

CWE

Potential DoS via exposed protocol handlers

Summary

Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1828716
	https://security.gentoo.org/glsa/202312-03
	https://security.gentoo.org/glsa/202401-10
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.956Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1828716"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Edward Prior"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "Protocol handlers \u003ccode\u003ems-cxh\u003c/code\u003e and \u003ccode\u003ems-cxh-full\u003c/code\u003e could have been leveraged to trigger a denial of service.\u003cbr\u003e*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.\n*Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential DoS via exposed protocol handlers",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:14.473Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1828716"
        },
        {
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32214",
    "datePublished": "2023-06-19T09:38:56.644Z",
    "dateReserved": "2023-05-04T16:11:54.244Z",
    "dateUpdated": "2025-05-27T16:53:14.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2023-32207 (GCVE-0-2023-32207)

Vulnerability from cvelistv5

Published

2023-06-02 00:00

Modified

2025-05-27 16:53

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE

Potential permissions request bypass via clickjacking

Summary

A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.

References

▼	URL	Tags
	https://bugzilla.mozilla.org/show_bug.cgi?id=1826116
	https://security.gentoo.org/glsa/202312-03	vendor-advisory
	https://security.gentoo.org/glsa/202401-10	vendor-advisory
	https://www.mozilla.org/security/advisories/mfsa2023-16/
	https://www.mozilla.org/security/advisories/mfsa2023-17/
	https://www.mozilla.org/security/advisories/mfsa2023-18/

Impacted products

Vendor

Product

Version

▼

Mozilla

Firefox

Version: unspecified < 113

	Mozilla	Firefox ESR	Version: unspecified < 102.11
	Mozilla	Thunderbird	Version: unspecified < 102.11

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-02T15:10:23.945Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826116"
          },
          {
            "name": "GLSA-202312-03",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202312-03"
          },
          {
            "name": "GLSA-202401-10",
            "tags": [
              "vendor-advisory",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202401-10"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2023-32207",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-31T15:11:27.539402Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-290",
                "description": "CWE-290 Authentication Bypass by Spoofing",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-01-31T15:11:34.788Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Firefox",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "113",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Firefox ESR",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Thunderbird",
          "vendor": "Mozilla",
          "versions": [
            {
              "lessThan": "102.11",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Hafiizh"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
            }
          ],
          "value": "A missing delay in popup notifications could have made it possible for an attacker to trick a user into granting permissions. This vulnerability affects Firefox \u003c 113, Firefox ESR \u003c 102.11, and Thunderbird \u003c 102.11."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Potential permissions request bypass via clickjacking",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-05-27T16:53:12.234Z",
        "orgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
        "shortName": "mozilla"
      },
      "references": [
        {
          "url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1826116"
        },
        {
          "name": "GLSA-202312-03",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202312-03"
        },
        {
          "name": "GLSA-202401-10",
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://security.gentoo.org/glsa/202401-10"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-16/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-17/"
        },
        {
          "url": "https://www.mozilla.org/security/advisories/mfsa2023-18/"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f16b083a-5664-49f3-a51e-8d479e5ed7fe",
    "assignerShortName": "mozilla",
    "cveId": "CVE-2023-32207",
    "datePublished": "2023-06-02T00:00:00.000Z",
    "dateReserved": "2023-05-04T00:00:00.000Z",
    "dateUpdated": "2025-05-27T16:53:12.234Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2023:2211-1

Vulnerability from csaf_suse

CVE-2023-32206 (GCVE-0-2023-32206)

Vulnerability from cvelistv5

CVE-2023-32213 (GCVE-0-2023-32213)

Vulnerability from cvelistv5

CVE-2023-32211 (GCVE-0-2023-32211)

Vulnerability from cvelistv5

CVE-2023-32215 (GCVE-0-2023-32215)

Vulnerability from cvelistv5

CVE-2023-32205 (GCVE-0-2023-32205)

Vulnerability from cvelistv5

CVE-2023-32212 (GCVE-0-2023-32212)

Vulnerability from cvelistv5

CVE-2023-32214 (GCVE-0-2023-32214)

Vulnerability from cvelistv5

CVE-2023-32207 (GCVE-0-2023-32207)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature