CVE-2023-25749

Android applications with unpatched vulnerabilities can be launched from a browser using Intents, exposing users to these vulnerabilities. Firefox will now confirm with users that they want to launch an external application before doing so. <br>*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.*. This vulnerability affects Firefox < 111.

• CWE-863

• https://bugzilla.mozilla.org/show_bug.cgi?id=1810705Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1810705Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-09/Vendor Advisory

Published

Jun 2, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-25743A lack of in app notification for entering fullscreen mode c…7.5
• CVE-2023-25744Mmemory safety bugs present in Firefox 109 and Firefox ESR 1…8.8
• CVE-2023-25745Memory safety bugs present in Firefox 109. Some of these bug…8.8
• CVE-2023-25746Memory safety bugs present in Firefox ESR 102.7. Some of the…8.8
• CVE-2023-25747A potential use-after-free in libaudio was fixed by disablin…7.5
• CVE-2023-25748By displaying a prompt with a long description, the fullscre…4.3
• CVE-2023-2575Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 …8.8
• CVE-2023-25750Under certain circumstances, a ServiceWorker's offline cache…4.3
• CVE-2023-25751Sometimes, when invalidating JIT code while following an ite…6.5
• CVE-2023-25752When accessing throttled streams, the count of available byt…6.5
• CVE-2023-25753 There exists an SSRF (Server-Side Request Forgery) vulnerab…6.5
• CVE-2023-25754Privilege Context Switching Error vulnerability in Apache So…9.8