vulnerability
MFSA2021-39 Firefox: Security Vulnerabilities fixed in Firefox ESR 78.14 (CVE-2021-38492)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | 2021-09-07 | 2021-09-08 | 2021-11-26 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
2021-09-07
Added
2021-09-08
Modified
2021-11-26
Description
When delegating navigations to the operating system, Firefox would accept the `mk` scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. *This bug only affects Firefox for Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox
Solution
mozilla-firefox-esr-upgrade-78_14
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.