CVE-2023-37201

Summary

CVE-2023-37201 is a vulnerability that allows an attacker to cause a use-after-free condition when establishing a WebRTC connection over HTTPS in affected versions of Firefox (<115), Firefox ESR (<102.13), and Thunderbird (<102.13). This issue arises due to an improper memory management process during the web conferencing feature's implementation. Successful exploitation could result in arbitrary code execution or a denial-of-service situation, putting user privacy and security at risk. Users are strongly advised to update their browsers to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.