CVE-2021-23999

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 1.4%

probabilidade de exploração

1.4%top 29% das CVEs

exploração observada

nãonenhuma fonte reporta

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

Produtos afetados

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

Referências

https://bugzilla.mozilla.org/show_bug.cgi?id=1691153 https://www.mozilla.org/security/advisories/mfsa2021-14/https://www.mozilla.org/security/advisories/mfsa2021-15/https://www.mozilla.org/security/advisories/mfsa2021-16/