CVE-2023-6867

The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be about to appear. This vulnerability affects Firefox ESR < 115.6 and Firefox < 121.

• CWE-1021

• https://bugzilla.mozilla.org/show_bug.cgi?id=1863863Issue Tracking, Permissions Required
• https://lists.debian.org/debian-lts-announce/2023/12/msg00020.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202401-10Third Party Advisory
• https://www.debian.org/security/2023/dsa-5581Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-56/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1863863Issue Tracking, Permissions Required
• https://lists.debian.org/debian-lts-announce/2023/12/msg00020.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202401-10Third Party Advisory
• https://www.debian.org/security/2023/dsa-5581Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-56/Vendor Advisory

Published

Dec 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6861The `nsWindow::PickerOpen(void)` method was susceptible to a…8.8
• CVE-2023-6862A use-after-free was identified in the `nsDNSService::Init`.…8.8
• CVE-2023-6863The `ShutdownObserver()` was susceptible to potentially unde…8.8
• CVE-2023-6864Memory safety bugs present in Firefox 120, Firefox ESR 115.5…8.8
• CVE-2023-6865`EncryptingOutputStream` was susceptible to exposing uniniti…6.5
• CVE-2023-6866TypedArrays can be fallible and lacked proper exception hand…8.8
• CVE-2023-6868In some instances, the user-agent would allow push requests …4.3
• CVE-2023-6869A `&lt;dialog>` element could have been manipulated to paint…6.5
• CVE-2023-6870Applications which spawn a Toast notification in a backgroun…4.3
• CVE-2023-6871Under certain conditions, Firefox did not display a warning …4.3
• CVE-2023-6872Browser tab titles were being leaked by GNOME to system logs…6.5
• CVE-2023-6873Memory safety bugs present in Firefox 120. Some of these bug…8.8