CVE-2021-47784CWE-770

Cyberfox Web Browser 52.9.1 - Denial of Service (PoC)

Medium · published January 15, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

⚠️ A runaway search bar can crash your Cyberfox! Just a massive 9,000,000 byte payload is enough to trigger a denial of service nightmare. 🔥 Think of it like a restaurant where a customer keeps ordering food without stopping — eventually, the kitchen gets overwhelmed and grinds to a halt! Similarly, flooding the search bar with excessive data causes the browser to crash. This denial of service vulnerability can leave users stranded, unable to use the browser and causing disruption to their browsing experience. While no data is lost, the inconvenience is enough to drive users away — imagine losing access to your favorite online resources just when you need them!

Put simply

Think of it like a restaurant where a customer keeps ordering food without stopping — eventually, the kitchen gets overwhelmed and grinds to a halt! Similarly, flooding the search bar with excessive data causes the browser to crash. In Cyberfox Web Browser 52.9.1, an attacker can exploit a flaw in the search bar by pasting in a massive payload, leading to an application crash due to a buffer overflow.

What to do

This denial of service vulnerability can leave users stranded, unable to use the browser and causing disruption to their browsing experience. While no data is lost, the inconvenience is enough to drive users away — imagine losing access to your favorite online resources just when you need them! To secure your setup, update Cyberfox to the latest version as soon as possible. Consider limiting input size for text fields and implementing checks to handle excessive data gracefully. Regular audits of your browser version will keep you safe from this and future vulnerabilities. You’ve got this! Stay proactive with updates, and you’ll keep your browsing secure and smooth. 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00238 · 14.1th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2026-01-15T15:52Z
EPSS history
Timeline
  • 15 JAN 15:52Z
    Cyberfox Web Browser 52.9.1 - Denial of Service (PoC)
    cvelistv5