CVE-2021-23957

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox

published February 26, 2021

CVSS
—
EPSS
1%
Percentile
55.9
In the wild
Unconfirmed
What it is

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00793 · 55.9th percentile
Published
2021-02-26T02:08Z
EPSS history
Timeline
  • 26 FEB 02:08Z
    Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox
    cvelistv5