VULNERABILITY INTELLIGENCE

CVE-2023-6861

CVSS score8.8 HIGH

EPSS probability1.41%

CISA KEVNot currently listed

Published2023-12-19

Last modified2026-06-17

Description

The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.