Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-43518 State: PUBLISHED Published: 2021-12-15T14:33:05 Last Updated: 2024-08-04T03:55:29.318Z Vendors: n/a Products: n/a Problem Types: n/a Description: Teeworlds up to and including 0.7.5 is vulnerable to Buffer Overflow. A map parser does not validate m_Channels value coming from a map file, leading to a buffer overflow. A malicious server may offer a specially crafted map that will overwrite client's stack causing denial of service or code execution. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/teeworlds/teeworlds/issues/2981 - https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/ - https://lists.fedoraproject.org/archives/list/packag
sues/2981 - https://mmmds.pl/fuzzing-map-parser-part-1-teeworlds/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OS2LI2RHQNUKUT3FKWYHRC27PLRWCHMZ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JIYZ7EVY6NZBM7FQF6GVUARYO6MKSEAT/
CVE ID: CVE-2021-43519 State: PUBLISHED Published: 2021-11-09T12:26:22 Last Updated: 2024-08-04T03:55:29.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack overflow in lua_resume of ldo.c in Lua Interpreter 5.1.0~5.4.4 allows attackers to perform a Denial of Service via a crafted script file. Additional Analyst Notes: - CVE Program Container: References: - http://lua-users.org/lists/lua-l/2021-10/msg00123.html - http://lua-users.org/lists/lua-l/2021-11/msg00015.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C7XHFYHGSZKL53VCLSJSAJ6VMFGAIXKO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedo
/message/C7XHFYHGSZKL53VCLSJSAJ6VMFGAIXKO/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P3EMGAQ5Y6GXJLY4K5DUOOEQT4MZ4J4F/
CVE ID: CVE-2021-43521 State: PUBLISHED Published: 2022-04-08T15:56:29 Last Updated: 2024-08-04T03:55:29.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Buffer Overflow vulnerability exists in zlog 1.2.15 via zlog_conf_build_with_file in src/zlog/src/conf.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/HardySimpson/zlog - https://github.com/HardySimpson/zlog/issues/206
CVE ID: CVE-2021-43522 State: PUBLISHED Published: 2022-02-02T23:41:09.000Z Last Updated: 2025-11-04T19:12:45.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Insyde InsydeH2O with kernel 5.1 through 2021-11-08, 5.2 through 2021-11-08, and 5.3 through 2021-11-08. A StorageSecurityCommandDxe SMM memory corruption vulnerability allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM. Additional Analyst Notes: - CVE Program Container: References: - https://www.insyde.com/security-pledge - https://security.netapp.com/advisory/ntap-20220216-0003/ - https://cert-portal.siemens.com/pro
yde.com/security-pledge - https://security.netapp.com/advisory/ntap-20220216-0003/ - https://cert-portal.siemens.com/productcert/pdf/ssa-306654.pdf
CVE ID: CVE-2021-43523 State: PUBLISHED Published: 2021-11-10T14:03:56.000Z Last Updated: 2025-05-05T16:46:05.077Z Vendors: n/a Products: n/a Problem Types: n/a Description: In uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, getaddrinfo, gethostbyaddr, and getnameinfo can lead to output of wrong hostnames (leading to domain hijacking) or injection into applications (leading to remote code execution, XSS, applications crashes, etc.). In other words, a validation step, which is expected in any stub resolver, does not occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Referenc
any stub resolver, does not occur. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://uclibc-ng.org/ - https://github.com/wbx-github/uclibc-ng/commit/0f822af0445e5348ce7b7bd8ce1204244f31d174 - https://www.openwall.com/lists/oss-security/2021/11/09/1
CVE ID: CVE-2021-43527 State: PUBLISHED Published: 2021-12-08T00:00:00 Last Updated: 2024-08-04T03:55:29.297Z Vendors: Mozilla Products: NSS Problem Types: Memory corruption via DER-encoded DSA and RSA-PSS signatures Description: NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT imp
, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-51/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1737470 - https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_73_RTM/ - https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/ - https://www.oracle.com/se
s/releases/NSS_3_73_RTM/ - https://ftp.mozilla.org/pub/security/nss/releases/NSS_3_68_1_RTM/ - https://www.oracle.com/security-alerts/cpuapr2022.html - https://security.netapp.com/advisory/ntap-20211229-0002/ - https://cert-portal.siemens.com/productcert/pdf/ssa-594438.pdf - https://www.starwindsoftware.com/security/sw-20220802-0001/ - https://security.gentoo.org/glsa/202212-05
CVE ID: CVE-2021-43528 State: PUBLISHED Published: 2021-12-08T21:21:12 Last Updated: 2024-08-04T03:55:29.399Z Vendors: Mozilla Products: Thunderbird Problem Types: JavaScript unexpectedly enabled for the composition area Description: Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://bugzilla.mozilla.org/show_
m Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1742579 - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43529 State: PUBLISHED Published: 2023-02-16T00:00:00.000Z Last Updated: 2025-03-19T15:00:31.859Z Vendors: Mozilla Products: Thunderbird Problem Types: Memory corruption when processing S/MIME messages Description: Thunderbird versions prior to 91.3.0 are vulnerable to the heap overflow described in CVE-2021-43527 when processing S/MIME messages. Thunderbird versions 91.3.0 and later will not call the vulnerable code when processing S/MIME messages that contain certificates with DER-encoded DSA or RSA-PSS signatures. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugzilla.mozilla.org/show_bug.cgi?id=CVE-2021-43529
CVE ID: CVE-2021-43530 State: PUBLISHED Published: 2021-12-08T21:21:04 Last Updated: 2024-08-04T03:55:29.359Z Vendors: Mozilla Products: Firefox Problem Types: Universal XSS in Firefox for Android via QR Code URLs Description: A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a URL scanned from a QR code. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1736886
CVE ID: CVE-2021-43531 State: PUBLISHED Published: 2021-12-08T21:20:58 Last Updated: 2024-08-04T03:55:29.364Z Vendors: Mozilla Products: Firefox Problem Types: Web Extensions could access pre-redirect URL when their context menu was triggered by a user Description: When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element clicked. If the Web Extension lacked the WebRequest permission for the hosts involved in the redirect, this would be a same-origin-violation leaking data the Web Extension should have access to. This was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. T
his was fixed to provide the pre-redirect URL. This is related to CVE-2021-43532 but in the context of Web Extensions. This vulnerability affects Firefox < 94. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1659155
CVE ID: CVE-2021-43532 State: PUBLISHED Published: 2021-12-08T21:20:53 Last Updated: 2024-08-04T03:55:29.273Z Vendors: Mozilla Products: Firefox Problem Types: 'Copy Image Link' context menu action could have been abused to see authentication tokens Description: The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that triggered authentication flows - in conjunction with a Content Security Policy that stopped a redirection chain in the middle - the final image URL could be one that contained an authentication token used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the
used to takeover a user account. If a website tricked a user into copy and pasting the image link back to the page, the page would be able to steal the authentication tokens. This was fixed by making the action return the original URL, before any redirects. This vulnerability affects Firefox < 94. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1719203
CVE ID: CVE-2021-43533 State: PUBLISHED Published: 2021-12-08T21:20:47 Last Updated: 2024-08-04T03:55:29.263Z Vendors: Mozilla Products: Firefox Problem Types: URL Parsing may incorrectly parse internationalized domains Description: When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting in inconsistencies that could lead to user confusion or attacks such as phishing. This vulnerability affects Firefox < 94. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1724233
CVE ID: CVE-2021-43534 State: PUBLISHED Published: 2021-12-08T21:20:42 Last Updated: 2024-08-04T03:55:29.303Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Memory safety bugs fixed in Firefox 94 and Firefox ESR 91.3 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.
rd < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://www.mozilla.org/security/advisories/mfsa2021-48/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1606864%2C1712671%2C1730048%2C1735152 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE ID: CVE-2021-43535 State: PUBLISHED Published: 2021-12-08T21:20:35 Last Updated: 2024-08-04T03:55:29.311Z Vendors: Mozilla Products: Firefox, Thunderbird, Firefox ESR Problem Types: Use-after-free in HTTP2 Session object Description: A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.3, and Firefox ESR < 91.3. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-43/ - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/sec
ecurity/advisories/mfsa2021-43/ - https://www.mozilla.org/security/advisories/mfsa2021-49/ - https://www.mozilla.org/security/advisories/mfsa2021-50/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1667102 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html
CVE ID: CVE-2021-43536 State: PUBLISHED Published: 2021-12-08T21:20:30 Last Updated: 2024-08-04T03:55:29.308Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: URL leakage when navigating while executing asynchronous function Description: Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/m
/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1730120 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43537 State: PUBLISHED Published: 2021-12-08T21:20:25 Last Updated: 2024-08-04T03:55:29.292Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Heap buffer overflow when using structured clone Description: An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/securit
ity/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1738237 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43538 State: PUBLISHED Published: 2021-12-08T21:20:20 Last Updated: 2024-08-04T04:03:07.658Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Missing fullscreen and pointer lock notification when requesting both Description: By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that had received full screen and pointer lock access, which could have been used for spoofing attacks. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - h
ional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1739091 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43539 State: PUBLISHED Published: 2021-12-08T21:20:15 Last Updated: 2024-08-04T04:03:06.894Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: GC rooting failure when calling wasm instance methods Description: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa202
95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1739683 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43540 State: PUBLISHED Published: 2021-12-08T21:20:08 Last Updated: 2024-08-04T04:03:06.919Z Vendors: Mozilla Products: Firefox Problem Types: WebExtensions could have installed persistent ServiceWorkers Description: WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that would not have been uninstalled with the extension. This vulnerability affects Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1636629 - https://security.gentoo.org/glsa/202202-03
CVE ID: CVE-2021-43541 State: PUBLISHED Published: 2021-12-08T21:20:02 Last Updated: 2024-08-04T04:03:06.909Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: External protocol handler parameters were unescaped Description: When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly escaped. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021
21-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1696685 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43542 State: PUBLISHED Published: 2021-12-08T21:19:42 Last Updated: 2024-08-04T04:03:08.166Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: XMLHttpRequest error codes could have leaked the existence of an external protocol handler Description: Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading external protocols. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - h
https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1723281 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43543 State: PUBLISHED Published: 2021-12-08T21:19:38 Last Updated: 2024-08-04T04:03:06.895Z Vendors: Mozilla Products: Thunderbird, Firefox ESR, Firefox Problem Types: Bypass of CSP sandbox directive when embedding Description: Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additional content. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2
a2021-53/ - https://www.mozilla.org/security/advisories/mfsa2021-54/ - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1738418 - https://www.debian.org/security/2021/dsa-5026 - https://lists.debian.org/debian-lts-announce/2021/12/msg00030.html - https://www.debian.org/security/2022/dsa-5034 - https://lists.debian.org/debian-lts-announce/2022/01/msg00001.html - https://security.gentoo.org/glsa/202202-03 - https://security.gentoo.org/glsa/202208-14
CVE ID: CVE-2021-43544 State: PUBLISHED Published: 2021-12-08T21:19:31 Last Updated: 2024-08-04T04:03:07.823Z Vendors: Mozilla Products: Firefox Problem Types: Receiving a malicious URL as text through a SEND intent could have led to XSS Description: When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/
affects Firefox < 95. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2021-52/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1739934