CVE-2023-4584

CVE-2023-4584 describes multiple memory safety bugs in Firefox, Firefox ESR, and Thunderbird versions prior to 117, 102.15, and 115.2 respectively. These flaws, categorized as CWE-787 (Out-of-bounds Write), could lead to memory corruption, potentially allowing arbitrary code execution with sufficient effort. Rated with a CVSS score of 8.8 (High), exploitation requires user interaction (UI:R) but can occur over a network (AV:N) with low attack complexity (AC:L), leading to high impacts on confidentiality, integrity, and availability (C:H/I:H/A:H). While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion and media coverage, indicating awareness within the security community.