Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox < 85.
CVSS Details
- CVSS 3.1 Base Score: 7.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade thunderbird | May 4, 2022 | Feb 26, 2021 |
| Alpine Linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-esrUpgrade librewolf | Aug 22, 2024 | Feb 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade thunderbirdUpgrade thunderbird-debuginfo | May 26, 2021 | Feb 26, 2021 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Feb 26, 2021 |
| Centos_linux | — | Upgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbird | Jun 1, 2021 | Feb 26, 2021 |
| Debian | — | Upgrade firefox-esrUpgrade thunderbird | Apr 23, 2021 | Feb 26, 2021 |
| Gentoo Linux | — | Upgrade mail-client/thunderbird-bin.Upgrade www-client/firefox.Upgrade mail-client/thunderbird.Upgrade www-client/firefox-bin. | Feb 1, 2021 | Feb 1, 2021 |
| Mfsa2021 03 | — | Upgrade to Mozilla Firefox version 85.0 | Jan 27, 2021 | Jan 26, 2021 |
| Mfsa2021 15 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 78.10 | Apr 20, 2021 | Feb 26, 2021 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 78.10Upgrade to the latest version of Mozilla Thunderbird | Apr 20, 2021 | Feb 26, 2021 |
| Oracle Solaris | — | Upgrade web/browser/firefox to version 78.10.0-11.4.34.0.1.94.3 on Solaris 11.4Upgrade web/data/firefox-bookmarks to version 78.10.0-11.4.34.0.1.94.3 on Solaris 11.4Upgrade mail/thunderbird to version 78.10.0-11.4.34.0.1.94.3 on Solaris 11.4 | Jun 16, 2021 | Feb 26, 2021 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox | Apr 27, 2021 | Apr 19, 2021 |
| Redhat_linux | — | No solution existsUpgrade firefox-debugsourceUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade thunderbirdUpgrade thunderbird-debugsource | Apr 27, 2021 | Feb 26, 2021 |
| Suse | — | Upgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-commonUpgrade MozillaFirefox-develUpgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefoxUpgrade MozillaFirefox-translations-other | Apr 27, 2021 | Feb 1, 2021 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbird | Feb 2, 2021 | Feb 1, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub