CVE-2021-23963: Medium severity firefox vulnerability
Published Jan 26, 2021
·Updated
When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission
Affected Software
2 affected componentsFixes available
Mozilla Firefox<85
85
Mozilla Firefox<85.0
Event History
Jan 26, 2021
CVE Published
12:00 AM
Feb 26, 2021
CVE Published
via MITRE·02:11 AM
Data Sourced
via MITRE·02:11 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2021-23963?
CVE-2021-23963 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2021-23963?
To fix CVE-2021-23963, users should update Mozilla Firefox to version 86 or later.
3
What impact does CVE-2021-23963 have on WebRTC sharing in Firefox?
CVE-2021-23963 can lead to users losing control over geolocation permissions during active WebRTC sharing.
4
In which versions of Firefox does CVE-2021-23963 exist?
CVE-2021-23963 affects Firefox versions prior to 86.
5
Can CVE-2021-23963 be exploited remotely?
Yes, CVE-2021-23963 can be exploited remotely if a user is tricked into sharing their geolocation.