Security Advisory

CVE-2021-23999

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-24 13:25:15
Last updated 2024-08-03 19:14:10
Assigner mozilla
State PUBLISHED

Description

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.