CVE-2023-37202

CVE-2023-37202 is a high-severity use-after-free vulnerability affecting Firefox, Firefox ESR, and Thunderbird versions prior to 115 and 102.13 respectively. This flaw, stemming from cross-compartment wrappers, could allow an attacker to store objects from other compartments in the main compartment, leading to memory corruption. With a CVSS score of 8.8, it presents a high risk due to its network-based attack vector, low attack complexity, and potential for high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, the vulnerability has garnered significant media attention and community discussion, indicating awareness within the cybersecurity landscape.