VULNERABILITY INTELLIGENCE

CVE-2021-23963

CVSS score4.3 MEDIUM

EPSS probability0.66%

CISA KEVNot currently listed

Published2021-02-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Description

When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox < 85.

Weakness classification

nvd@nist.gov: CWE-281

Primary references

security@mozilla.org — Issue Tracking, Permissions Required, Vendor Advisory
security@mozilla.org — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory