Vulnerability in Mozilla Firefox
CVE-2021-23995
When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thu…
EPSS: 0.012 (65.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Mozilla Firefox — versions unspecified
- Mozilla Firefox Esr — versions unspecified
- Mozilla Firefox_esr
- Mozilla Thunderbird — versions unspecified
Weakness classification (CWE)
References
- security@mozilla.org (x_refsource_MISC, Release Notes, Vendor Advisory)
- security@mozilla.org (x_refsource_MISC, Release Notes, Vendor Advisory)
- security@mozilla.org (x_refsource_MISC, Release Notes, Vendor Advisory)
- security@mozilla.org (Permissions Required, x_refsource_MISC, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-23995?
- CVE-2021-23995 is a high-severity vulnerability in Mozilla Firefox, classified under Operation on a Resource after Expiration or Release. CVSS score: 8.8/10. Published 2021-06-24.
- How severe is CVE-2021-23995?
- High severity. CVSS v3 base score is 8.8 out of 10.