(CVE-2021-23998) - Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. ![]() (CVE-2021-23995) - Through complicated navigations with new windows, an HTTP page could have inherited a secure lock icon from an HTTPS page. We presume that with enough effort this could have been exploited to run arbitrary code. (CVE-2021-23994) - When Responsive Design Mode was enabled, it used references to objects that were previously freed. A WebGL framebuffer was not initialized early enough, resulting in memory corruption and an out of bound write. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-15 advisory. Description The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 78.10. Synopsis A web browser installed on the remote macOS or Mac OS X host is affected by multiple vulnerabilities.
0 Comments
Leave a Reply. |