CVE-2023-6865

`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.

• https://bugzilla.mozilla.org/show_bug.cgi?id=1864123Issue Tracking, Permissions Required
• https://lists.debian.org/debian-lts-announce/2023/12/msg00020.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202401-10Third Party Advisory
• https://www.debian.org/security/2023/dsa-5581Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-56/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1864123Issue Tracking, Permissions Required
• https://lists.debian.org/debian-lts-announce/2023/12/msg00020.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202401-10Third Party Advisory
• https://www.debian.org/security/2023/dsa-5581Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-56/Vendor Advisory

Published

Dec 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6859A use-after-free condition affected TLS socket creation when…8.8
• CVE-2023-6860The `VideoBridge` allowed any content process to use texture…6.5
• CVE-2023-6861The `nsWindow::PickerOpen(void)` method was susceptible to a…8.8
• CVE-2023-6862A use-after-free was identified in the `nsDNSService::Init`.…8.8
• CVE-2023-6863The `ShutdownObserver()` was susceptible to potentially unde…8.8
• CVE-2023-6864Memory safety bugs present in Firefox 120, Firefox ESR 115.5…8.8
• CVE-2023-6866TypedArrays can be fallible and lacked proper exception hand…8.8
• CVE-2023-6867The timing of a button click causing a popup to disappear wa…6.1
• CVE-2023-6868In some instances, the user-agent would allow push requests …4.3
• CVE-2023-6869A `&lt;dialog>` element could have been manipulated to paint…6.5
• CVE-2023-6870Applications which spawn a Toast notification in a backgroun…4.3
• CVE-2023-6871Under certain conditions, Firefox did not display a warning …4.3