CVE-2021-29948

Katalog CVE

CVSS 2.5 · Low EPSS 0,29%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') pada mozilla thunderbird. Skor CVSS 3.1 2.5 (Low) menurut NVD.

Deskripsi (NVD)

Signatures are written to disk before and read during verification, which might be subject to a race condition when a malicious local process or user is replacing the file. This vulnerability affects Thunderbird < 78.10.

Rincian

Terbit di NVD

24 Juni 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.5 (Low), sumber NVD
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

EPSS (30 hari)

0,29% peluang dieksploitasi; lebih tinggi dari 19,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.mozilla.org/show_bug.cgi?id=1692899 exploit · patch · advisory vendor
• https://www.mozilla.org/security/advisories/mfsa2021-14/ release notes · advisory vendor