CVE-2023-6868

In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager subscription defined one. This could allow empty messages to be sent from unauthorized parties. *This bug only affects Firefox on Android.* This vulnerability affects Firefox < 121.

• https://bugzilla.mozilla.org/show_bug.cgi?id=1865488Issue Tracking, Permissions Required
• https://security.gentoo.org/glsa/202401-10Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-56/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1865488Issue Tracking, Permissions Required
• https://security.gentoo.org/glsa/202401-10Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2023-56/Vendor Advisory

Published

Dec 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6862A use-after-free was identified in the `nsDNSService::Init`.…8.8
• CVE-2023-6863The `ShutdownObserver()` was susceptible to potentially unde…8.8
• CVE-2023-6864Memory safety bugs present in Firefox 120, Firefox ESR 115.5…8.8
• CVE-2023-6865`EncryptingOutputStream` was susceptible to exposing uniniti…6.5
• CVE-2023-6866TypedArrays can be fallible and lacked proper exception hand…8.8
• CVE-2023-6867The timing of a button click causing a popup to disappear wa…6.1
• CVE-2023-6869A `&lt;dialog>` element could have been manipulated to paint…6.5
• CVE-2023-6870Applications which spawn a Toast notification in a backgroun…4.3
• CVE-2023-6871Under certain conditions, Firefox did not display a warning …4.3
• CVE-2023-6872Browser tab titles were being leaked by GNOME to system logs…6.5
• CVE-2023-6873Memory safety bugs present in Firefox 120. Some of these bug…8.8
• CVE-2023-6874Prior to v7.4.0, Ember ZNet is vulnerable to a denial of ser…7.5