CVE-2023-32210

6.5 mediumEPSS 0.5%

Medium (6.5) in mozilla firefox. EPSS 0.5% chance of exploitation in the next 30 days.

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability affects Firefox < 113.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
Published: 2023-06-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1776755
https://security.gentoo.org/glsa/202401-10
https://www.mozilla.org/security/advisories/mfsa2023-16/
https://bugzilla.mozilla.org/show_bug.cgi?id=1776755
https://security.gentoo.org/glsa/202401-10

Check your stack JSON