CVE-2021-23999

State: Published
Severity: Not scored
Published: Jun 24, 2021
Updated: Aug 3, 2024
Reserved: Jan 13, 2021

Description

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Firefox ESRMozilla	before 78.10Affected
ThunderbirdMozilla	before 78.10Affected
FirefoxMozilla	before 88Affected

References

https://www.mozilla.org/security/advisories/mfsa2021-14/
https://www.mozilla.org/security/advisories/mfsa2021-16/
https://www.mozilla.org/security/advisories/mfsa2021-15/
https://bugzilla.mozilla.org/show_bug.cgi?id=1691153

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.