The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-4958 advisory.

    [102.15.0-1.0.1]
    - Update to 102.15.0 build2

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3559-1 advisory.

    Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606).

    - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688)
    - CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback  (bmo#1846689)
    - CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694)
    - CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397)
    - CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884)
    - CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007)
    - CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079)
    - CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046)
    - CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758)
    - CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874)
    - CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030)
    - CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2,     Thunderbird 102.15, and Thunderbird 115.2  (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526,     bmo#1847529)
    - CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird     115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3554 advisory.

    - -------------------------------------------------------------------------     Debian LTS Advisory DLA-3554-1                debian-lts@lists.debian.org     https://www.debian.org/lts/security/               Emilio Pozuelo Monfort     September 05, 2023                            https://wiki.debian.org/LTS
    - -------------------------------------------------------------------------

    Package        : thunderbird     Version        : 1:102.15.0-1~deb10u1     CVE ID         : CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4581                      CVE-2023-4584

    Multiple security issues were discovered in Thunderbird, which could     result in denial of service or the execution of arbitrary code.

    For Debian 10 buster, these problems have been fixed in version     1:102.15.0-1~deb10u1.

    We recommend that you upgrade your thunderbird packages.

    For the detailed security status of thunderbird please refer to     its security tracker page at:
    https://security-tracker.debian.org/tracker/thunderbird

    Further information about Debian LTS security advisories, how to apply     these updates to your system and frequently asked questions can be     found at: https://wiki.debian.org/LTS

Tenable has extracted the preceding description block directly from the Debian security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 117.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-34 advisory.

  - Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2023-4585)

  - When receiving rendering data over IPC <code>mStream</code> could have been destroyed when initialized,     which could have led to a use-after-free causing a potentially exploitable crash. (CVE-2023-4573)

  - When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks     could have been created at a time and eventually all simultaneously destroyed as soon as one of the     callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash.
    (CVE-2023-4574)

  - When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could     have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks     finished. This could have led to a use-after-free causing a potentially exploitable crash. (CVE-2023-4575)

  - On Windows, an integer overflow could occur in <code>RecordedSourceSurfaceCreation</code> which resulted     in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape. This     bug only affects Firefox on Windows. Other operating systems are unaffected. (CVE-2023-4576)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-c92eb29264 advisory.

    - New upstream version (117.0)

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-2026_0041 advisory.

    This advisory aggregates security fixes for the firefox SRPM in CIQ LTS 8.6. It addresses 127 CVEs:
    CVE-2022-46871, CVE-2024-1547, CVE-2024-3857, CVE-2024-1552, CVE-2023-6857, and 122 more.

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6368-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, bypass security restrictions, cross-site tracing, or execute     arbitrary code. (CVE-2023-4573, CVE-2023-4574, CVE-2023-4575, CVE-2023-4581, CVE-2023-4584)

    It was discovered that Thunderbird did not properly manage memory when handling WebP images. If a user     were tricked into opening a malicious WebP image file, an attacker could potentially exploit these to     cause a denial of service or execute arbitrary code. (CVE-2023-4863)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
181123	Oracle Linux 9 : firefox (ELSA-2023-4958)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2025/9/9	high
181257	SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:3559-1)	Nessus	SuSE Local Security Checks	2023/9/12	2026/6/26	high
180517	Debian dla-3554 : thunderbird - security update	Nessus	Debian Local Security Checks	2023/9/6	2025/1/22	high
180233	Mozilla Firefox < 117.0	Nessus	MacOS X Local Security Checks	2023/8/29	2025/11/18	high
185301	Fedora 39 : firefox (2023-c92eb29264)	Nessus	Fedora Local Security Checks	2023/11/7	2024/11/14	high
357986	Rocky Linux 8.6 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource Multiple Vulnerabilities (ciqsa-2026_0041)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/12	critical
181411	Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Thunderbird vulnerabilities (USN-6368-1)	Nessus	Ubuntu Local Security Checks	2023/9/14	2024/8/29	high

検出

プラグインの検索

high

high

high

high

high

critical

high