CVE-2021-23999

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should…

published June 24, 2021

CVSS
—
EPSS
1%
Percentile
71.7
In the wild
Unconfirmed
What it is

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01372 · 71.7th percentile
Published
2021-06-24T13:25Z
EPSS history
Timeline
  • 24 JUN 13:25Z
    If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should…
    cvelistv5