VULNERABILITY INTELLIGENCE

CVE-2021-23957

CVSS score7.4 HIGH

EPSS probability0.79%

CISA KEVNot currently listed

Published2021-02-26

Last modified2026-06-17

Description

Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.