vulnerability

MFSA2023-56 Firefox: Security Vulnerabilities fixed in Firefox 121 (CVE-2023-6866)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Dec 19, 2023

Added

Dec 20, 2023

Modified

Mar 27, 2026

Description

TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect TypedArrays to always succeed. This vulnerability affects Firefox < 121.

Solution

mozilla-firefox-upgrade-121_0

References

CVE-2023-6866
https://attackerkb.com/topics/CVE-2023-6866
CWE-755
EUVD-EUVD-2023-59070
http://www.mozilla.org/security/announce/2023/mfsa2023-56.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-59070

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report