CVE-2023-29542

A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug only affects Firefox and Thunderbird on Windows. Other versions of Firefox and Thunderbird are unaffected.* This vulnerability affects Firefox < 112, Firefox ESR < 102.10, and Thunderbird < 102.10.

• https://bugzilla.mozilla.org/show_bug.cgi?id=1810793Permissions Required
• https://bugzilla.mozilla.org/show_bug.cgi?id=1815062Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-14/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-15/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1810793Permissions Required
• https://bugzilla.mozilla.org/show_bug.cgi?id=1815062Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-13/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-14/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-15/Vendor Advisory

Published

Jun 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29537Multiple race conditions in the font initialization could ha…7.5
• CVE-2023-29538Under specific circumstances a WebExtension may have receive…4.3
• CVE-2023-29539When handling the filename directive in the Content-Disposit…8.8
• CVE-2023-2954Cross-site Scripting (XSS) - Stored in GitHub repository lia…5.4
• CVE-2023-29540Using a redirect embedded into <code>sourceMappingUrls</code…6.1
• CVE-2023-29541Firefox did not properly handle downloads of files ending in…8.8
• CVE-2023-29543An attacker could have caused memory corruption and a potent…8.8
• CVE-2023-29544If multiple instances of resource exhaustion occurred at the…6.5
• CVE-2023-29545Similar to CVE-2023-28163, this time when choosing 'Save Lin…6.5
• CVE-2023-29546When recording the screen while in Private Browsing on Firef…6.5
• CVE-2023-29547When a secure cookie existed in the Firefox cookie jar an in…6.5
• CVE-2023-29548A wrong lowering instruction in the ARM64 Ion compiler resul…6.5