CVE-2023-6861 (published 2023-12-19T13:38:42.037Z)
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This vulnerability affects Firefox ESR < 115.6, Thunderbird < 115.6, and Firefox < 121.
Affected products: Vendor: Mozilla
Product: Firefox ESR
Versions: unspecified