Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Mozilla Firefox ESR 91.2 Clear all filters
TI-2021-16097 CVE-2021-38497 · GHSA-qmc5-2jh2-rpcw

Origin validation error in Mozilla Firefox

Priority LOW 30

Through use of reportValidity() and window.open(), a plain-text validation message could have been overlaid on another origin, leading to possible user confusion and spoofing attacks.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00591 Published 2021-11-03 Partial fix · 93, 91.2 CWE-346
TI-2021-16098 CVE-2021-38498 · GHSA-f7wc-pcqv-5mwm

Use after free in Mozilla Firefox

Priority LOW 36

During process shutdown, a document could have caused a use-after-free of a languages service object, leading to memory corruption and a potentially exploitable crash.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01467 Published 2021-11-03 Partial fix · 93, 91.2 CWE-416