Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
Rewterz penetration testing services help organizations determine if a cyber attacker can gain access to their critical assets while giving them detailed insights of the overall business impact of a cyber attack.
Before Rewterz got its start, the market was in dire need of a specialized and dedicated information security company. It was nearly impossible for businesses to find a trustworthy provider that could truly cover all of their bases. We wanted to meet this need, giving companies across the globe a chance to get ahead while knowing that their data is in good hands.
High
CVE-2023-4058 CVSS:8.8
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by memory safety bugs within the browser engine. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
CVE-2023-4055 CVSS:6.5
Mozilla Firefox could allow a remote attacker to bypass security restrictions, caused by a cookie jar overflow. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to cause requests to be sent with some cookies missing.
CVE-2023-4054 CVSS:6.5
Mozilla Firefox could allow a remote attacker to bypass security restrictions, caused by the lack of warning when opening appref-ms files. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to bypass security restrictions.
CVE-2023-4053 CVSS:6.5
Mozilla Firefox could allow a remote attacker to conduct spoofing attacks, caused by the obscuring of the full screen notification by an external program. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to conduct a spoofing attack.
CVE-2023-4052 CVSS:8.8
Mozilla Firefox could allow a remote attacker to gain elevated privileges on the system, caused by an error related to the uninstaller. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to delete arbitrary files and gain elevated privileges on the system.
CVE-2023-4051 CVSS:6.5
Mozilla Firefox could allow a remote attacker to conduct spoofing attacks, caused by the obscuring of the full screen notification by file open dialog. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to conduct a spoofing attack.
CVE-2023-4050 CVSS:8.8
Mozilla Firefox is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by StorageManager. By persuading a victim to visit a specially crafted Web site, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
CVE-2023-4049 CVSS:8.8
Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by race conditions in reference counting code. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service.
CVE-2023-4048 CVSS:6.5
Mozilla Firefox is vulnerable to a denial of service, caused by an out-of-bounds read when parsing HTML with DOMParser in low memory situations. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to cause the browser to crash.
CVE-2023-4047 CVSS:6.5
Mozilla Firefox could allow a remote attacker to bypass security restrictions, caused by a bug in popup notifications delay calculation. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability using clickjacking to trick a user into granting permissions.
CVE-2023-4046 CVSS:6.5
Mozilla Firefox is vulnerable to a denial of service, caused by the incorrect value used during WASM compilation. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to cause a crash in the content process.
CVE-2023-4045 CVSS:6.5
Mozilla Firefox could allow a remote attacker to bypass security restrictions, caused by the failure to properly track cross-origin tainting by Offscreeen Canvas. By persuading a victim to visit a specially crafted Web site, a remote attacker could exploit this vulnerability to bypass cross-origin restrictions and access image data from another site in violation of same-origin policy.
Mozilla
Refer to Mozilla Foundation Security Advisory for patch, upgrade or suggested workaround information.