Severity
Medium
Analysis Summary
CVE-2021-23996
By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to conduct a spoofing attack. Mozilla Firefox could allow a remote attacker to conduct spoofing attacks.
CVE-2021-23998
By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability to spoof a secure lock icon. Mozilla Firefox could allow a remote attacker to conduct spoofing attacks.
Impact
Unauthorized Access
Affected Vendors
Mozilla
Affected Products
- Mozilla Firefox 87
- Mozilla Firefox ESR 78.9
- Mozilla Thunderbird 78.9.0
Remediation
Refer to Mozilla Foundation Security Advisory 2021-16 for patch, upgrade or suggested workaround information.
Mozilla Foundation Security Advisory 2021-16