CVE-2023-6868

Summary

CVE-2023-6868 is a vulnerability affecting Firefox browsers on Android. The issue lies in the user-agent's handling of push requests, allowing empty messages from unauthorized parties even when a valid VAPID (VaporPressureIdentifier) is defined in the push manager subscription. This security flaw could potentially lead to unwanted notifications or data leakage, making it crucial for Firefox users on Android to update their browsers to the latest version, which is 121 or above.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.