CVE-2023-37201

CVE-2023-37201 is a high-severity use-after-free vulnerability affecting Mozilla Firefox versions prior to 115, Firefox ESR prior to 102.13, and Thunderbird prior to 102.13. An unauthenticated attacker could trigger this condition by creating a WebRTC connection over HTTPS, leading to high impacts on confidentiality, integrity, and availability. With a CVSS score of 8.8, this vulnerability is easily exploitable with low attack complexity, requiring user interaction. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness within the security community.