CVE-2023-4580

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

• CWE-311

• https://bugzilla.mozilla.org/show_bug.cgi?id=1843046Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-38/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1843046Issue Tracking, Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2023-34/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-38/Vendor Advisory

Published

Sep 11, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-45794A vulnerability has been identified in Mendix Applications u…8.1
• CVE-2023-45795A cross-site scripting vulnerability in the Builder Componen…7.8
• CVE-2023-45796A stored cross-site scripting vulnerability in the Runtime c…8.1
• CVE-2023-45797A Buffer overflow vulnerability in DreamSecurity MagicLine4N…9.8
• CVE-2023-45798In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerabil…9.8
• CVE-2023-45799In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulne…9.8
• CVE-2023-45800Improper Neutralization of Special Elements used in an SQL C…7.5
• CVE-2023-45801Improper Authentication vulnerability in Nadatel DVR allows …7.5
• CVE-2023-45802When a HTTP/2 stream was reset (RST frame) by a client, ther…5.9
• CVE-2023-45803urllib3 is a user-friendly HTTP client library for Python. u…4.2
• CVE-2023-45804Rejected reason: User requested a CVE number by mistake
• CVE-2023-45805pdm is a Python package and dependency manager supporting th…7.8