CVE-2021-23963: Medium severity Mozilla Firefox vulnerability
When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 85 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 85.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 85.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23963?
CVE-2021-23963 has been classified as a medium severity vulnerability.
How do I fix CVE-2021-23963?
To fix CVE-2021-23963, users should update Mozilla Firefox to version 86 or later.
What impact does CVE-2021-23963 have on WebRTC sharing in Firefox?
CVE-2021-23963 can lead to users losing control over geolocation permissions during active WebRTC sharing.
In which versions of Firefox does CVE-2021-23963 exist?
CVE-2021-23963 affects Firefox versions prior to 86.
Can CVE-2021-23963 be exploited remotely?
Yes, CVE-2021-23963 can be exploited remotely if a user is tricked into sharing their geolocation.