CVE-2021-23996: Medium severity Mozilla Firefox vulnerability
By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Firefoxto a version that resolves this vulnerability.Fixed in 88 - Upgrade
Upgrade
alpine/firefoxto a version that resolves this vulnerability.Fixed in 88.0-r0 - Upgrade
Upgrade
alpine/librewolfto a version that resolves this vulnerability.Fixed in 88.0-r0
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-23996?
The severity of CVE-2021-23996 is considered medium due to the potential for spoofing attacks.
How do I fix CVE-2021-23996?
To fix CVE-2021-23996, update your Mozilla Firefox browser to version 89 or later.
Who is affected by CVE-2021-23996?
CVE-2021-23996 affects users of Mozilla Firefox versions prior to 89.
What types of attacks can CVE-2021-23996 enable?
CVE-2021-23996 can enable spoofing attacks that may be used for phishing or other malicious activities.
Can CVE-2021-23996 be exploited remotely?
Yes, CVE-2021-23996 can be exploited remotely if users visit a specially crafted webpage.