CVE-2021-43546

2021-12-0821:19:22

mozilla

www.cve.org

cursor spoofing

thunderbird

firefox

vulnerability

AI Score

6.4

Confidence

Low

EPSS

0.005

Percentile

76.5%

JSON

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

CNA Affected

[
  {
    "product": "Thunderbird",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "91.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox ESR",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "91.4.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Firefox",
    "vendor": "Mozilla",
    "versions": [
      {
        "lessThan": "95",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]