CVE-2023-23606

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 109.

• CWE-787
• CWE-787

• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1764974%2C1798591%2C1799201%2C1800446%2C1801248%2C1802100%2C1803393%2C1804626%2C1804971%2C1807004Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-01/Vendor Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1764974%2C1798591%2C1799201%2C1800446%2C1801248%2C1802100%2C1803393%2C1804626%2C1804971%2C1807004Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-01/Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-23600Per origin notification permissions were being stored in a w…6.5
• CVE-2023-23601Navigations were being allowed when dragging a URL from a cr…6.5
• CVE-2023-23602A mishandled security check when creating a WebSocket in a W…6.5
• CVE-2023-23603Regular expressions used to filter out forbidden properties …6.5
• CVE-2023-23604A duplicate `SystemPrincipal` object could be created when p…6.5
• CVE-2023-23605Mozilla developers and the Mozilla Fuzzing Team reported mem…8.8
• CVE-2023-23607erohtar/Dasherr is a dashboard for self-hosted services. In …9.8
• CVE-2023-23608Spotipy is a light weight Python library for the Spotify Web…4.3
• CVE-2023-23609Contiki-NG is an open-source, cross-platform operating syste…7.4
• CVE-2023-2361Cross-site Scripting (XSS) - Stored in GitHub repository pim…5.4
• CVE-2023-23610GLPI is a Free Asset and IT Management Software package. Ver…6.5
• CVE-2023-23611LTI Consumer XBlock implements the consumer side of the LTI …5.4