CVE-2021-29953

A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability. Note: This issue only affected Firefox for Android. Other operating systems are unaffected...

CVE-2021-29953

Mode C: Affected software is Mozilla Firefox and Firefox for Android prior to 88.0.1/88.1.3. The root cause is insecure handling of multiple prompts involving javascript: URLs that can force attacker-controlled JavaScript to run in the context of another domain, yielding a Universal Cross‑Site Sc...

CVE-2021-29953

creationtimestamp| type| source ---|---|--- 2021-06-10 15:22:13+00:00| seen| https://t.me/androidMalware/1206 2021-06-24 18:24:33+00:00| seen| https://t.me/cibsecurity/25682...

CVE-2021-29953

A malicious webpage could have forced a Firefox for Android user into executing attacker-controlled JavaScript in the context of another domain, resulting in a Universal Cross-Site Scripting vulnerability. Note: This issue only affected Firefox for Android. Other operating systems are unaffected...

Mozilla Firefox < 88.0.1

The version of Firefox installed on the remote Windows host is prior to 88.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-20 advisory. - When Web Render components were destructed, a race condition could have caused undefined behavior, and we presume tha...

Mozilla Firefox < 88.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 88.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-20 advisory. - When Web Render components were destructed, a race condition could have caused undefined behavior, and we...