CVE-2021-23999

HIGH · CVSS 8.8 EPSS 1.28%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-06-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2021-23999

Severity

HIGH

CVSS

8.8

EPSS

1.28%

Firefox

Original NVD Description

If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content. This vulnerability affects Firefox ESR < 78.10, Thunderbird < 78.10, and Firefox < 88.