RHSA-2021:0995

An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited.

Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8.

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.

A malicious extension could have opened a popup window lacking an address bar.

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections.