We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction (a form of symbolic link) to allow arbitrary file deletion controlled by the non-privileged user. *This bug only affects Firefox on Windows. Other operating systems are unaffected.* This vulnerability affects Firefox < 116, Firefox ESR < 115.1, and Thunderbird < 115.1.
Reserved 2023-08-01 | Published 2023-08-01 | Updated 2024-10-22 | Assigner mozillaFile deletion and privilege escalation through Firefox uninstaller
ycdxsb
bugzilla.mozilla.org/show_bug.cgi?id=1824420
www.mozilla.org/security/advisories/mfsa2023-29/
www.mozilla.org/security/advisories/mfsa2023-31/
www.mozilla.org/security/advisories/mfsa2023-33/
Support options
