CVE-2021-29963
MEDIUMFirefox for Android < 89.0 - Insufficient Verification of Data Authenticity in Private Browsing Mode
Title source: llmDescription
Address bar search suggestions in private browsing mode were re-using session data from normal mode. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 89.
References (2)
Core 2
Core References
Release Notes, Vendor Advisory x_refsource_misc
https://www.mozilla.org/security/advisories/mfsa2021-23/
Permissions Required, Vendor Advisory x_refsource_misc
https://bugzilla.mozilla.org/show_bug.cgi?id=1705068
Scores
CVSS v3
4.3
EPSS
0.0014
EPSS Percentile
34.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Details
CWE
CWE-345
Status
published
Products (1)
mozilla/firefox
< 89.0
Published
Jun 24, 2021
Tracked Since
Feb 18, 2026