CVE-2021-38506 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Content spoofing |
| Description | A security issue has been found in Firefox before version 94 and Thunderbird before version 91.3. Through a series of navigations, Firefox and Thunderbird could have entered fullscreen mode without notification or warning to the user. This could lead to spoofing attacks on the browser UI including phishing. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2518 | thunderbird | 91.2.1-1 | 91.3.0-1 | High | Fixed | |
| AVG-2511 | firefox | 93.0-1 | 94.0-1 | High | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 05 Nov 2021 | ASA-202111-3 | AVG-2518 | thunderbird | High | multiple issues |
| 05 Nov 2021 | ASA-202111-2 | AVG-2511 | firefox | High | multiple issues |
| References |
|---|
https://www.mozilla.org/security/advisories/mfsa2021-48/ https://www.mozilla.org/security/advisories/mfsa2021-50/ https://bugzilla.mozilla.org/show_bug.cgi?id=1730750 |