CVE-2023-6869 (MEDIUM)

Vendor	Product	Version range	Fixed in
debian	firefox	< firefox 121.0-1 (sid)	firefox 121.0-1 (sid)
mozilla	firefox	< 121.0	121.0
mozilla	firefox	—	—
mozilla	firefox	>= 0 < 121.0+build1-0ubuntu0.20.04.1	121.0+build1-0ubuntu0.20.04.1
mozilla	firefox	>= 0 < 121.0.1+build1-0ubuntu0.20.04.1	121.0.1+build1-0ubuntu0.20.04.1
mozilla	firefox	>= unspecified < 121	121

Ubuntu

Firefox regressions

vendor_ubuntu·2024-01-11·CVSS 4.3

[MEDIUM] Firefox regressions Title: Firefox regressions Summary: USN-6562-1 caused some minor regressions in Firefox. USN-6562-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code.(CVE-2023-6865, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6866, CVE-2023-6867, CVE-2023-6861, CVE-2023-6869, CVE-2023-6871, CVE-2023-6872, CVE-2023-6863, CVE-2023-6864, CVE-2023-6873) DoHyun Lee discovered that Firefox did not properly manage

Ubuntu

Firefox vulnerabilities

vendor_ubuntu·2024-01-02·CVSS 4.3

CVE-2023-6857 [MEDIUM] Firefox vulnerabilities Title: Firefox vulnerabilities Summary: Several security issues were fixed in Firefox. Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code.(CVE-2023-6865, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6866, CVE-2023-6867, CVE-2023-6861, CVE-2023-6869, CVE-2023-6871, CVE-2023-6872, CVE-2023-6863, CVE-2023-6864, CVE-2023-6873) DoHyun Lee discovered that Firefox did not properly manage memory when used on systems with the Mesa VM driver. An attacker could potentially exploit this issue to execute arbitrary code. (CVE-2023-6856) George Pantela and Hubert Kario discovered tha

Debian

CVE-2023-6869: firefox - A `<dialog>` element could have been manipulated to paint content outside of ...

vendor_debian·2023·CVSS 6.5

CVE-2023-6869 [MEDIUM] CVE-2023-6869: firefox - A `<dialog>` element could have been manipulated to paint content outside of ... A ` ` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox < 121. Scope: local sid: resolved (fixed in 121.0-1)

Mozilla

Mozilla Foundation Security Advisory 2023-56: CVE-2023-6869

vendor_mozilla·CVSS 6.5

CVE-2023-6869 [MEDIUM] Mozilla Foundation Security Advisory 2023-56: CVE-2023-6869 Mozilla Foundation Security Advisory 2023-56 CVE: CVE-2023-6869 Product: Firefox Impact: high Fixed in: Firefox 121

OSV

firefox regressions

osv·2024-01-11·CVSS 4.3

CVE-2023-6865 [MEDIUM] firefox regressions firefox regressions USN-6562-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code.(CVE-2023-6865, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6866, CVE-2023-6867, CVE-2023-6861, CVE-2023-6869, CVE-2023-6871, CVE-2023-6872, CVE-2023-6863, CVE-2023-6864, CVE-2023-6873) DoHyun Lee discovered that Firefox did not properly manage memory when used on systems with the Mesa VM driver. An attacker coul

OSV

firefox vulnerabilities

osv·2024-01-02·CVSS 4.3

CVE-2023-6865 [MEDIUM] firefox vulnerabilities firefox vulnerabilities Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code.(CVE-2023-6865, CVE-2023-6857, CVE-2023-6858, CVE-2023-6859, CVE-2023-6866, CVE-2023-6867, CVE-2023-6861, CVE-2023-6869, CVE-2023-6871, CVE-2023-6872, CVE-2023-6863, CVE-2023-6864, CVE-2023-6873) DoHyun Lee discovered that Firefox did not properly manage memory when used on systems with the Mesa VM driver. An attacker could potentially exploit this issue to execute arbitrary code. (CVE-2023-6856) George Pantela and Hubert Kario discovered that Firefox using multiple NSS NIST curves which were susceptible

OSV

CVE-2023-6869: A ` ` element could have been manipulated to paint content outside of a sandboxed iframe

osv·2023-12-20·CVSS 6.5

CVE-2023-6869 [MEDIUM] CVE-2023-6869: A ` ` element could have been manipulated to paint content outside of a sandboxed iframe A ` ` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox < 121.

GHSA

GHSA-8c4w-xw52-85px: A `` element could have been manipulated to paint content outside of a sandboxed iframe

ghsa_unreviewed·2023-12-19

CVE-2023-6869 [MEDIUM] GHSA-8c4w-xw52-85px: A `` element could have been manipulated to paint content outside of a sandboxed iframe A `` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of trusted content. This vulnerability affects Firefox < 121.

CVE-2023-6869: A ` ` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow untrusted content to display under the guise of…

Affected

CVSS provenance