Cyber Resilience

CVE-2023-6206

Medium

Published: 21 November 2023

Published
21 November 2023
Modified
21 November 2024
KEV Added
—
Patch
—
CVSS Score v3.1 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS Score 0.0043 62.9th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2023-6206 is a medium-severity Improper Restriction of Rendered UI Layers or Frames (CWE-1021) vulnerability in Debian Debian Linux. Its CVSS base score is 5.4 (Medium).

Operationally, ranked in the top 37.1% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact to surprise users by luring them to click where the permission grant button would be…

more

about to appear. This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5.

CWE(s)
CWE-1021

Related Threats

No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.

Affected Assets

mozilla
firefox
≤ 120.0
mozilla
firefox esr
≤ 115.5.0
mozilla
thunderbird
≤ 115.5
debian
debian linux
10.0, 11.0, 12.0

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References