CVE-2023-4054

When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code

published August 1, 2023

CVSS
—
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code.

*This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 102.14, Firefox ESR < 115.1, Thunderbird < 102.14, and Thunderbird < 115.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.4th percentile
Published
2023-08-01T15:00Z
EPSS history
Timeline
  • 01 AUG 15:00Z
    When opening appref-ms files, Firefox did not warn the user that these files may contain malicious code
    cvelistv5