vulnerability

Red Hat: CVE-2021-43528: CVE-2021-43528 Mozilla: JavaScript unexpectedly enabled for the composition area (Multiple Advisories)

Name: Red Hat: CVE-2021-43528: CVE-2021-43528 Mozilla: JavaScript unexpectedly enabled for the composition area (Multiple Advisories)
Creator: Red Hat
Published: 2021-12-08T00:00:00.000Z
Keywords: CVE, CWE-269, Red Hat, 2021, 43528, 43528 Mozilla, redhat-upgrade-thunderbird, redhat-upgrade-thunderbird-debuginfo, redhat-upgrade-thunderbird-debugsource, Severity 4

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Dec 8, 2021

Added

Dec 10, 2021

Modified

Mar 27, 2026

Description

Thunderbird unexpectedly enabled JavaScript in the composition area. The JavaScript execution context was limited to this area and did not receive chrome-level privileges, but could be used as a stepping stone to further an attack with other vulnerabilities. This vulnerability affects Thunderbird < 91.4.0.

Solutions

redhat-upgrade-thunderbirdredhat-upgrade-thunderbird-debuginforedhat-upgrade-thunderbird-debugsource

References

CWE-269
EUVD-EUVD-2021-30457
NVD-CVE-2021-43528
REDHAT-RHSA-2021:5045
REDHAT-RHSA-2021:5046
REDHAT-RHSA-2021:5047
REDHAT-RHSA-2021:5048
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-30457

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report