Published: 22/12/2022 Updated: 08/08/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 95, Firefox ESR < 91.4.0, and Thunderbird < 91.4.0.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox esr
mozilla thunderbird
mozilla firefox

An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited This vulnerability affects Thunderbird < 789 and Firefox ESR < 789 (CVE-2021-4127) Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported ...

Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported memory safety bugs present in Firefox 94 Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code Th ...

Mozilla Foundation Security Advisory 2021-52 Security Vulnerabilities fixed in Firefox 95 Announced December 7, 2021 Impact high Products Firefox Fixed in Firefox 95 ...

Mozilla Foundation Security Advisory 2021-53 Security Vulnerabilities fixed in Firefox ESR 9140 Announced December 7, 2021 Impact high Products Firefox ESR Fixed in Firefox ESR 914 ...

Mozilla Foundation Security Advisory 2021-54 Security Vulnerabilities fixed in Thunderbird 9140 Announced December 7, 2021 Impact high Products Thunderbird Fixed in Thunderbird 914 ...

CWE-787 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1393362%2C1736046%2C1736751%2C1737009%2C1739372%2C1739421 https://www.mozilla.org/security/advisories/mfsa2021-52/https://www.mozilla.org/security/advisories/mfsa2021-54/https://www.mozilla.org/security/advisories/mfsa2021-53/https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2023-1951.html

CVE-2021-4129

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect