CVE-2013-1673: The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not properly maintain Mozilla Maintenanc...

Security readout for executives and security teams

This is a Windows-only Firefox updater flaw from 2013. In some upgrades from older Firefox versions, registry entries for the Mozilla Maintenance Service could leave a trusted path writable. A local user with access to that path could use it to gain higher privileges. Exposure is most likely on unmanaged or legacy Windows systems running Firefox before 21.0, especially systems upgraded from older Firefox builds. Modern supported Firefox installations are unlikely to be affected, but the provided sources do not enumerate all vulnerable upgrade states. Treat this as a legacy endpoint hygiene issue unless old Firefox remains in the environment. It can raise local user privileges, but the provided evidence does not show remote attack or active exploitation. Mitigation focus: Upgrade affected Windows Firefox installations to Firefox 21.0 or a supported current release.; Check Mozilla guidance before relying on registry cleanup as a standalone fix.; Remove obsolete Firefox versions from managed Windows endpoints..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.