Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | alpine-linux-upgrade-firefox-esralpine-linux-upgrade-firefoxalpine-linux-upgrade-mozjs78alpine-linux-upgrade-thunderbirdalpine-linux-upgrade-librewolf | Jun 17, 2022 | Feb 26, 2021 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Feb 22, 2021 | Feb 22, 2021 | |
| Arch Linux | arch-linux-upgrade-latest | Jul 11, 2025 | Feb 26, 2021 | |
| Centos_linux | — | centos-upgrade-firefoxcentos-upgrade-firefox-debuginfocentos-upgrade-firefox-debugsourcecentos-upgrade-thunderbirdcentos-upgrade-thunderbird-debuginfocentos-upgrade-thunderbird-debugsource | Jan 28, 2021 | Jan 27, 2021 |
| Debian | debian-upgrade-firefox-esrdebian-upgrade-thunderbird | Jan 29, 2021 | Jan 29, 2021 | |
| Gentoo Linux | gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin | Feb 1, 2021 | Feb 1, 2021 | |
| Mfsa2021 03 | mozilla-firefox-upgrade-85_0 | Jan 27, 2021 | Jan 26, 2021 | |
| Mfsa2021 04 | mozilla-firefox-esr-upgrade-78_7 | Jan 27, 2021 | Jan 26, 2021 | |
| Mozilla Thunderbird | mozilla-thunderbird-upgrade-78_7 | Jan 27, 2021 | Jan 26, 2021 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-libmozjs-78-78-11-0-11-4-39-0-1-107-0oracle-solaris-11-4-upgrade-mail-thunderbird-78-8-0-11-4-31-0-1-88-4oracle-solaris-11-4-upgrade-web-browser-firefox-78-8-0-11-4-31-0-1-88-4oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-78-8-0-11-4-31-0-1-88-4 | Mar 17, 2021 | Feb 26, 2021 | |
| Oracle_linux | — | oracle-linux-upgrade-firefoxoracle-linux-upgrade-thunderbird | Jan 28, 2021 | Jan 26, 2021 |
| Redhat_linux | redhat-upgrade-firefoxredhat-upgrade-firefox-debuginforedhat-upgrade-firefox-debugsourceredhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource | Jan 28, 2021 | Jan 27, 2021 | |
| Suse | — | suse-upgrade-mozillafirefoxsuse-upgrade-mozillafirefox-branding-upstreamsuse-upgrade-mozillafirefox-buildsymbolssuse-upgrade-mozillafirefox-develsuse-upgrade-mozillafirefox-translations-commonsuse-upgrade-mozillafirefox-translations-othersuse-upgrade-mozillathunderbirdsuse-upgrade-mozillathunderbird-translations-commonsuse-upgrade-mozillathunderbird-translations-other | Jan 30, 2021 | Jan 27, 2021 |
| Ubuntu | ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird | Feb 2, 2021 | Jan 27, 2021 | |
| Vmware Photon_os | vmware-photon_os_update_tdnf | Jan 20, 2025 | Feb 26, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub