Vulnerability in Microsoft Windows
CVE-2023-29542
A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .download. This could have led to accidental execution of malicious code. *This bug on…
EPSS: 0.009 (57.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Microsoft Windows
- Mozilla Firefox — versions unspecified
- Mozilla Firefox Esr — versions unspecified
- Mozilla Firefox_esr
- Mozilla Thunderbird — versions unspecified
References
- security@mozilla.org (Permissions Required)
- security@mozilla.org (Permissions Required)
- security@mozilla.org (Vendor Advisory)
- security@mozilla.org (Vendor Advisory)
- security@mozilla.org (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-29542?
- CVE-2023-29542 is a critical-severity vulnerability in Microsoft Windows. CVSS score: 9.8/10. Published 2023-06-19.
- How severe is CVE-2023-29542?
- Critical severity. CVSS v3 base score is 9.8 out of 10.