CVE-2023-0767

HIGH · CVSS 8.8 EPSS 0.82%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-06-02 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2023-0767

Severity

HIGH

CVSS

8.8

EPSS

0.82%

Firefox

Original NVD Description

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox < 110, Thunderbird < 102.8, and Firefox ESR < 102.8.