CVE-2023-28162: Mozilla Firefox

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

While implementing AudioWorklets, some code may have casted one type to another, invalid, dynamic type. This could have led to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Affected products

• Mozilla Firefox: before 111.0 (fixed in 111.0)
• Mozilla Firefox ESR: before 102.9 (fixed in 102.9)
• Mozilla Thunderbird: before 102.9 (fixed in 102.9)

Published 2023-06-02. Last modified 2026-06-17.