First published: Tue Jun 01 2021(Updated: )
Address bar search suggestions in private browsing mode were re-using session data from normal mode. This bug only affects Firefox for Android. Other operating systems are unaffected.
Credit: security@mozilla.org
Affected Software | Affected Version | How to fix |
---|---|---|
Firefox | <89 | 89 |
Firefox | <89.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-29963 is considered a moderate severity vulnerability affecting Firefox for Android.
To fix CVE-2021-29963, update your Firefox for Android to version 89 or later.
CVE-2021-29963 affects Firefox for Android versions prior to 89.
No, CVE-2021-29963 only affects the Android version of Firefox, not desktop versions.
CVE-2021-29963 can lead to unintended exposure of session data from normal browsing in private mode.