vulnerability

Ubuntu: (Multiple Advisories) (CVE-2021-38503): Firefox vulnerabilities

Try Surface Command
Back to search
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:P/I:P/A:P)
Published
Nov 3, 2021
Added
Nov 4, 2021
Modified
Mar 27, 2026

Description

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.

Solutions

ubuntu-upgrade-firefoxubuntu-upgrade-thunderbird

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

    Try it today