vulnerability
Oracle Solaris 11: CVE-2021-23984 (11.4 SRU 32.88.3)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:M/Au:N/C:N/I:P/A:N) | Mar 31, 2021 | Apr 21, 2021 | Feb 17, 2022 |
Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:P/A:N)
Published
Mar 31, 2021
Added
Apr 21, 2021
Modified
Feb 17, 2022
Description
A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9.
Solutions
oracle-solaris-11-4-upgrade-mail-thunderbird-78-9-0-11-4-32-0-1-88-3oracle-solaris-11-4-upgrade-web-browser-firefox-78-9-0-11-4-32-0-1-88-3oracle-solaris-11-4-upgrade-web-data-firefox-bookmarks-78-9-0-11-4-32-0-1-88-3
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.