CVE-2021-23960

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.3%

probabilidade de exploração

1.3%top 31% das CVEs

exploração observada

nãonenhuma fonte reporta

Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1675755 https://www.mozilla.org/security/advisories/mfsa2021-03/https://www.mozilla.org/security/advisories/mfsa2021-04/https://www.mozilla.org/security/advisories/mfsa2021-05/