CVE-2021-23995

Source
https://cve.org/CVERecord?id=CVE-2021-23995
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-23995.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-23995
Downstream
Related
Withdrawn
2026-01-27T04:17:35.648964Z
Published
2021-06-24T14:15:09Z
Modified
2026-01-27T04:17:35.648964Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

When Responsive Design Mode was enabled, it used references to objects that were previously freed. We presume that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.

References

Affected packages