Vulnerabilities

TI-2021-10609 CVE-2021-29993 · GHSA-7926-phm6-wvh3

Firefox for Android allowed navigations through the `intent://` protocol, which could be…

LOW 37

Firefox for Android allowed navigations through the `intent://` protocol, which could be used to cause crashes and UI spoofs.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00732 Published 2021-11-03 Fixed in 92

TI-2021-16091 CVE-2021-38491 · GHSA-x4p9-6wvp-vc8f

Mixed-content checks were unable to analyze opaque origins which led to some mixed…

LOW 30

Mixed-content checks were unable to analyze opaque origins which led to some mixed content being loaded.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00876 Published 2021-11-03 Fixed in 92

TI-2021-16092 CVE-2021-38492 · GHSA-qq3m-5g62-2hhj

When delegating navigations to the operating system, Firefox would accept the `mk` scheme…

LOW 31

When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01155 Published 2021-11-03 Fixed in 92, 91.1 +1

TI-2021-16093 CVE-2021-38493 · GHSA-6rrw-rx8w-qx97

Out-of-bounds write in Mozilla Firefox ESR

MEDIUM 41

Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01245 Published 2021-11-03 Partial fix · 78.14, 92 CWE-787

TI-2021-16094 CVE-2021-38494 · GHSA-64fr-v334-fr7x

Out-of-bounds write in Mozilla Firefox

MEDIUM 40

Mozilla developers reported memory safety bugs present in Firefox 91.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00806 Published 2021-11-03 Fixed in 92 CWE-787