CVE-2023-6867

Summary

CVE-2023-6867 is a vulnerability affecting Firefox ESR versions below 115.6 and Firefox versions below 121. Hackers can exploit this timing issue to deceive users by making a pop-up disappear just as the anti-clickjacking delay on permission prompts is about to expire. This allows the attacker to surprise users and potentially trick them into granting permissions at an unexpected moment.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.