CVE-2021-23995

Katalog CVE

CVSS 8.8 · High EPSS 1,2%

Kerentanan Operation on a Resource after Expiration or Release pada mozilla firefox, mozilla firefox esr +1 lainnya. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

Rincian

Terbit di NVD

24 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-672: Operation on a Resource after Expiration or Release

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1699835 issue tracking · permissions required · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2021-14/ release notes · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2021-15/ release notes · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2021-16/ release notes · advisory vendor