CVE-2021-23961

Published: Feb 26, 2021Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 4.0

Source: NVD

Description

Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox < 85.

Affected (3)

Products: Mozilla: Firefox · Debian: Debian Linux

1 product

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mozilla Firefox	Before 85.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

References (16)

https://bugzilla.mozilla.org/show_bug.cgi?id=1677940

Source: security@mozilla.org

Issue TrackingPermissions RequiredVendor Advisory

https://lists.debian.org/debian-lts-announce/2021/04/msg00019.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2021/04/msg00020.html

Source: security@mozilla.org

Mailing ListThird Party Advisory

https://security.gentoo.org/glsa/202104-09

Source: security@mozilla.org

Third Party Advisory

https://security.gentoo.org/glsa/202104-10

Source: security@mozilla.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4895

Source: security@mozilla.org

Third Party Advisory

https://www.debian.org/security/2021/dsa-4897

Source: security@mozilla.org

Third Party Advisory

https://www.mozilla.org/security/advisories/mfsa2021-03/

Source: security@mozilla.org

Release NotesVendor Advisory

https://bugzilla.mozilla.org/show_bug.cgi?id=1677940