CVE-2023-4580

Push notifications saved to disk unencrypted

published September 11, 2023

CVSS
—
EPSS
0%
Percentile
35.5
In the wild
Unconfirmed
What it is

Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability affects Firefox < 117, Firefox ESR < 115.2, and Thunderbird < 115.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.5th percentile
Published
2023-09-11T08:01Z
EPSS history
Timeline
  • 11 SEP 08:01Z
    Push notifications saved to disk unencrypted
    cvelistv5