Description (CNA)
If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Mozilla / Firefox ESR | affected unspecified before 78.10 |
| Mozilla / Thunderbird | affected unspecified before 78.10 |
| Mozilla / Firefox | affected unspecified before 88 |
CWE
No CWE identifiers supplied.
References
- https://www.mozilla.org/security/advisories/mfsa2021-14/
- https://www.mozilla.org/security/advisories/mfsa2021-16/
- https://www.mozilla.org/security/advisories/mfsa2021-15/
- https://bugzilla.mozilla.org/show_bug.cgi?id=1691153
ADP enrichment
No English description supplied.