Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Mozilla Firefox ESR, Thunderbird 78.9 Clear all filters
TI-2021-06302 CVE-2021-23981 · GHSA-6hwg-29mr-qgf8

Out-of-bounds write in Mozilla Firefox ESR

Priority LOW 38

A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash.

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.01145 Published 2021-03-31 Partial fix · 78.9, 87 CWE-787
TI-2021-06303 CVE-2021-23982 · GHSA-hg4f-qgj6-3h4w

Using techniques that built on the slipstream research, a malicious webpage could have…

Priority LOW 30

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00743 Published 2021-03-31 Partial fix · 78.9, 87 CWE-326
TI-2021-06308 CVE-2021-23987 · GHSA-5597-54m5-f56x

Out-of-bounds write in Mozilla Firefox ESR

Priority MEDIUM 41

Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01416 Published 2021-03-31 Partial fix · 78.9, 87 CWE-787