Vulnerabilities

TI-2021-10579 CVE-2021-29962 · GHSA-hp43-m6jc-vrgr

Firefox for Android would become unstable and hard-to-recover when a website opened too…

LOW 21

Firefox for Android would become unstable and hard-to-recover when a website opened too many popups.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00745 Published 2021-06-24 Fixed in 89 CWE-404

TI-2021-10580 CVE-2021-29963 · GHSA-vjmq-qgx6-29w9

Insufficient verification of data authenticity in Mozilla Firefox

LOW 20

Address bar search suggestions in private browsing mode were re-using session data from normal mode.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00334 Published 2021-06-24 Fixed in 89 CWE-345

TI-2021-10581 CVE-2021-29964 · GHSA-6mgf-v5gc-vgc7

Out-of-bounds read in Mozilla Thunderbird

LOW 33

A locally-installed hostile program could send `WM_COPYDATA` messages that Firefox would process incorrectly, leading to an out-of-bounds read.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00816 Published 2021-06-24 Partial fix · 78.11, 89 CWE-125

TI-2021-10582 CVE-2021-29965 · GHSA-272h-q2v7-f686

A malicious website that causes an HTTP Authentication dialog to be spawned could trick…

LOW 25

A malicious website that causes an HTTP Authentication dialog to be spawned could trick the built-in password manager to suggest passwords for the currently active website instead of the website that triggered the dialog…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00737 Published 2021-06-24 Fixed in 89 CWE-610

TI-2021-10584 CVE-2021-29967 · GHSA-xcvm-2qxh-c4v3

Out-of-bounds write in Mozilla Thunderbird

MEDIUM 41

Mozilla developers reported memory safety bugs present in Firefox 88 and Firefox ESR 78.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01368 Published 2021-06-24 Partial fix · 78.11, 89 CWE-787