p PatchFirst

CVE-2021-4140

CVE-2021-4140

This page contains facts from public vulnerability sources. Check the original advisory before updating.

It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5.

CVSS 9.8 · Critical · EPSS 1.4% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • firefox esr

    Versions
    • ≥ unspecified, < 91.5: Affected (custom)

    Update to 91.5

  • firefox

    Versions
    • ≥ unspecified, < 96: Affected (custom)

    Update to 96

  • thunderbird

    Versions
    • ≥ unspecified, < 91.5: Affected (custom)

    Update to 91.5

  • firefox-esr Debian:12

    Affected ranges
    • ECOSYSTEM: < 91.5.0esr-1

    Update to 91.5.0esr-1

  • firefox-esr Debian:13

    Affected ranges
    • ECOSYSTEM: < 91.5.0esr-1

    Update to 91.5.0esr-1

  • firefox-esr Debian:14

    Affected ranges
    • ECOSYSTEM: < 91.5.0esr-1

    Update to 91.5.0esr-1

  • thunderbird Debian:12

    Affected ranges
    • ECOSYSTEM: < 1:91.5.0-1

    Update to 1:91.5.0-1

  • thunderbird Debian:13

    Affected ranges
    • ECOSYSTEM: < 1:91.5.0-1

    Update to 1:91.5.0-1

  • thunderbird Debian:14

    Affected ranges
    • ECOSYSTEM: < 1:91.5.0-1

    Update to 1:91.5.0-1

  • firefox Ubuntu:18.04:LTS

    Versions
    • 56.0+build6-0ubuntu1
    • 57.0.1+build2-0ubuntu1
    • 59.0.1+build1-0ubuntu1
    • 59.0.2+build1-0ubuntu1
    • 60.0+build2-0ubuntu1
    • 60.0.1+build2-0ubuntu0.18.04.1
    • 60.0.2+build1-0ubuntu0.18.04.1
    • 61.0+build3-0ubuntu0.18.04.1
    • 61.0.1+build1-0ubuntu0.18.04.1
    • 62.0+build2-0ubuntu0.18.04.3
    • 62.0+build2-0ubuntu0.18.04.4
    • 62.0+build2-0ubuntu0.18.04.5
    • 62.0.3+build1-0ubuntu0.18.04.1
    • 63.0+build2-0ubuntu0.18.04.2
    • 63.0.3+build1-0ubuntu0.18.04.1
    • 64.0+build3-0ubuntu0.18.04.1
    • 65.0+build2-0ubuntu0.18.04.1
    • 65.0.1+build2-0ubuntu0.18.04.1
    • 66.0+build3-0ubuntu0.18.04.1
    • 66.0.1+build1-0ubuntu0.18.04.1
    • 66.0.2+build1-0ubuntu0.18.04.1
    • 66.0.3+build1-0ubuntu0.18.04.1
    • 66.0.4+build3-0ubuntu0.18.04.1
    • 66.0.5+build1-0ubuntu0.18.04.1
    • 67.0+build2-0ubuntu0.18.04.1
    • 67.0.1+build1-0ubuntu0.18.04.1
    • 67.0.2+build2-0ubuntu0.18.04.1
    • 67.0.3+build1-0ubuntu0.18.04.1
    • 67.0.4+build1-0ubuntu0.18.04.1
    • 68.0+build3-0ubuntu0.18.04.1
    • 68.0.1+build1-0ubuntu0.18.04.1
    • 68.0.2+build1-0ubuntu0.18.04.1
    • 69.0+build2-0ubuntu0.18.04.1
    • 69.0.1+build1-0ubuntu0.18.04.1
    • 69.0.2+build1-0ubuntu0.18.04.1
    • 70.0+build2-0ubuntu0.18.04.1
    • 70.0.1+build1-0ubuntu0.18.04.1
    • 71.0+build5-0ubuntu0.18.04.1
    • 72.0.1+build1-0ubuntu0.18.04.1
    • 72.0.2+build1-0ubuntu0.18.04.1
    • 73.0+build3-0ubuntu0.18.04.1
    • 73.0.1+build1-0ubuntu0.18.04.1
    • 74.0+build3-0ubuntu0.18.04.1
    • 74.0.1+build1-0ubuntu0.18.04.1
    • 75.0+build3-0ubuntu0.18.04.1
    • 76.0+build2-0ubuntu0.18.04.1
    • 76.0.1+build1-0ubuntu0.18.04.1
    • 77.0.1+build1-0ubuntu0.18.04.1
    • 78.0.1+build1-0ubuntu0.18.04.1
    • 78.0.2+build2-0ubuntu0.18.04.1
    • 79.0+build1-0ubuntu0.18.04.1
    • 80.0+build2-0ubuntu0.18.04.1
    • 80.0.1+build1-0ubuntu0.18.04.1
    • 81.0+build2-0ubuntu0.18.04.1
    • 81.0.2+build1-0ubuntu0.18.04.1
    • 82.0+build2-0ubuntu0.18.04.1
    • 82.0.2+build1-0ubuntu0.18.04.1
    • 82.0.3+build1-0ubuntu0.18.04.1
    • 83.0+build2-0ubuntu0.18.04.2
    • 84.0+build3-0ubuntu0.18.04.1
    • 84.0.1+build1-0ubuntu0.18.04.1
    • 84.0.2+build1-0ubuntu0.18.04.1
    • 85.0+build1-0ubuntu0.18.04.1
    • 85.0.1+build1-0ubuntu0.18.04.1
    • 86.0+build3-0ubuntu0.18.04.1
    • 86.0.1+build1-0ubuntu0.18.04.1
    • 87.0+build3-0ubuntu0.18.04.2
    • 88.0+build2-0ubuntu0.18.04.2
    • 88.0.1+build1-0ubuntu0.18.04.2
    • 89.0+build2-0ubuntu0.18.04.2
    • 89.0.1+build1-0ubuntu0.18.04.1
    • 89.0.2+build1-0ubuntu0.18.04.1
    • 90.0+build1-0ubuntu0.18.04.1
    • 90.0.2+build1-0ubuntu0.18.04.1
    • 91.0+build2-0ubuntu0.18.04.1
    • 91.0.1+build1-0ubuntu0.18.04.1
    • 91.0.2+build1-0ubuntu0.18.04.1
    • 92.0+build3-0ubuntu0.18.04.1
    • 93.0+build1-0ubuntu0.18.04.1
    • 94.0+build3-0ubuntu0.18.04.1
    • 95.0+build1-0ubuntu0.18.04.1
    • 95.0.1+build2-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: < 96.0+build2-0ubuntu0.18.04.1

    Update to 96.0+build2-0ubuntu0.18.04.1

  • thunderbird Ubuntu:18.04:LTS

    Versions
    • 1:52.4.0+build1-0ubuntu2
    • 1:52.6.0+build1-0ubuntu1
    • 1:52.7.0+build1-0ubuntu1
    • 1:52.8.0+build1-0ubuntu0.18.04.1
    • 1:52.9.1+build3-0ubuntu0.18.04.1
    • 1:60.2.1+build1-0ubuntu0.18.04.2
    • 1:60.4.0+build2-0ubuntu0.18.04.1
    • 1:60.5.1+build2-0ubuntu0.18.04.1
    • 1:60.6.1+build2-0ubuntu0.18.04.1
    • 1:60.7.0+build1-0ubuntu0.18.04.1
    • 1:60.7.1+build1-0ubuntu0.18.04.1
    • 1:60.7.2+build2-0ubuntu0.18.04.1
    • 1:60.8.0+build1-0ubuntu0.18.04.1
    • 1:60.9.0+build1-0ubuntu0.18.04.1
    • 1:68.2.1+build1-0ubuntu0.18.04.1
    • 1:68.2.2+build1-0ubuntu0.18.04.1
    • 1:68.4.1+build1-0ubuntu0.18.04.1
    • 1:68.7.0+build1-0ubuntu0.18.04.1
    • 1:68.8.0+build2-0ubuntu0.18.04.2
    • 1:68.10.0+build1-0ubuntu0.18.04.1
    • 1:78.8.1+build1-0ubuntu0.18.04.1
    • 1:78.11.0+build1-0ubuntu0.18.04.2
    • 1:78.13.0+build1-0ubuntu0.18.04.1
    • 1:78.14.0+build1-0ubuntu0.18.04.1
    • 1:78.14.0+build1-0ubuntu0.18.04.2
    Affected ranges
    • ECOSYSTEM: < 1:91.5.0+build1-0ubuntu0.18.04.1

    Update to 1:91.5.0+build1-0ubuntu0.18.04.1

  • mozjs52 Ubuntu:18.04:LTS

    Versions
    • 52.3.1-0ubuntu3
    • 52.3.1-7fakesync1
    • 52.8.1-0ubuntu0.18.04.1
    • 52.9.1-0ubuntu0.18.04.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs38 Ubuntu:18.04:LTS

    Versions
    • 38.8.0~repack1-0ubuntu1
    • 38.8.0~repack1-0ubuntu3
    • 38.8.0~repack1-0ubuntu4
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • firefox Ubuntu:20.04:LTS

    Versions
    • 69.0.3+build1-0ubuntu1
    • 70.0+build2-0ubuntu1
    • 70.0+build2-0ubuntu2
    • 70.0.1+build1-0ubuntu2
    • 71.0+build2-0ubuntu2
    • 71.0+build5-0ubuntu1
    • 72.0.1+build1-0ubuntu1
    • 72.0.2+build1-0ubuntu1
    • 73.0+build1-0ubuntu1
    • 73.0+build2-0ubuntu1
    • 73.0+build3-0ubuntu1
    • 73.0.1+build1-0ubuntu1
    • 74.0+build1-0ubuntu1
    • 74.0+build2-0ubuntu1
    • 74.0+build2-0ubuntu2
    • 74.0+build3-0ubuntu1
    • 75.0+build3-0ubuntu1
    • 76.0+build2-0ubuntu0.20.04.1
    • 76.0.1+build1-0ubuntu0.20.04.1
    • 77.0.1+build1-0ubuntu0.20.04.1
    • 78.0.1+build1-0ubuntu0.20.04.1
    • 78.0.2+build2-0ubuntu0.20.04.1
    • 79.0+build1-0ubuntu0.20.04.1
    • 80.0+build2-0ubuntu0.20.04.1
    • 80.0.1+build1-0ubuntu0.20.04.1
    • 81.0+build2-0ubuntu0.20.04.1
    • 81.0.2+build1-0ubuntu0.20.04.1
    • 82.0+build2-0ubuntu0.20.04.1
    • 82.0.2+build1-0ubuntu0.20.04.1
    • 82.0.3+build1-0ubuntu0.20.04.1
    • 83.0+build2-0ubuntu0.20.04.1
    • 84.0+build3-0ubuntu0.20.04.1
    • 84.0.1+build1-0ubuntu0.20.04.1
    • 84.0.2+build1-0ubuntu0.20.04.1
    • 85.0+build1-0ubuntu0.20.04.1
    • 85.0.1+build1-0ubuntu0.20.04.1
    • 86.0+build3-0ubuntu0.20.04.1
    • 86.0.1+build1-0ubuntu0.20.04.1
    • 87.0+build3-0ubuntu0.20.04.2
    • 88.0+build2-0ubuntu0.20.04.1
    • 88.0.1+build1-0ubuntu0.20.04.2
    • 89.0+build2-0ubuntu0.20.04.2
    • 89.0.1+build1-0ubuntu0.20.04.1
    • 89.0.2+build1-0ubuntu0.20.04.1
    • 90.0+build1-0ubuntu0.20.04.1
    • 90.0.2+build1-0ubuntu0.20.04.1
    • 91.0+build2-0ubuntu0.20.04.1
    • 91.0.1+build1-0ubuntu0.20.04.1
    • 91.0.2+build1-0ubuntu0.20.04.1
    • 92.0+build3-0ubuntu0.20.04.1
    • 93.0+build1-0ubuntu0.20.04.1
    • 94.0+build3-0ubuntu0.20.04.1
    • 95.0+build1-0ubuntu0.20.04.1
    • 95.0.1+build2-0ubuntu0.20.04.1
    Affected ranges
    • ECOSYSTEM: < 96.0+build2-0ubuntu0.20.04.1

    Update to 96.0+build2-0ubuntu0.20.04.1

  • thunderbird Ubuntu:20.04:LTS

    Versions
    • 1:68.1.2+build1-0ubuntu1
    • 1:68.1.2+build1-0ubuntu2
    • 1:68.2.1+build1-0ubuntu1
    • 1:68.2.2+build1-0ubuntu1
    • 1:68.3.0+build2-0ubuntu1
    • 1:68.3.1+build1-0ubuntu2
    • 1:68.4.1+build1-0ubuntu1
    • 1:68.4.2+build2-0ubuntu1
    • 1:68.5.0+build1-0ubuntu1
    • 1:68.6.0+build2-0ubuntu1
    • 1:68.7.0+build1-0ubuntu1
    • 1:68.7.0+build1-0ubuntu2
    • 1:68.8.0+build2-0ubuntu0.20.04.2
    • 1:68.10.0+build1-0ubuntu0.20.04.1
    • 1:78.7.1+build1-0ubuntu0.20.04.1
    • 1:78.8.1+build1-0ubuntu0.20.04.1
    • 1:78.11.0+build1-0ubuntu0.20.04.2
    • 1:78.13.0+build1-0ubuntu0.20.04.2
    • 1:78.14.0+build1-0ubuntu0.20.04.1
    • 1:78.14.0+build1-0ubuntu0.20.04.2
    Affected ranges
    • ECOSYSTEM: < 1:91.5.0+build1-0ubuntu0.20.04.1

    Update to 1:91.5.0+build1-0ubuntu0.20.04.1

  • mozjs68 Ubuntu:20.04:LTS

    Versions
    • 68.5.0-1~fakesync
    • 68.5.0-2~fakesync
    • 68.6.0-1
    • 68.6.0-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • mozjs52 Ubuntu:20.04:LTS

    Versions
    • 52.9.1-1build1
    • 52.9.1-1ubuntu3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • firefox Ubuntu:22.04:LTS

    Versions
    • 93.0+build1-0ubuntu3
    • 94.0+build3-0ubuntu1
    • 94.0.2+build1-0ubuntu1
    • 94.0.2+build2-0ubuntu1
    • 95.0+build1-0ubuntu1
    • 95.0.1+build2-0ubuntu1
    • 95.0.2+build1-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 96.0+build2-0ubuntu1

    Update to 96.0+build2-0ubuntu1

  • mozjs78 Ubuntu:22.04:LTS

    Versions
    • 78.13.0-1
    • 78.15.0-2
    • 78.15.0-4ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • thunderbird Ubuntu:22.04:LTS

    Versions
    • 1:91.1.2+build1-0ubuntu1
    • 1:91.3.0+build2-0ubuntu1
    • 1:91.3.1+build1-0ubuntu1
    • 1:91.3.2+build1-0ubuntu1
    • 1:91.4.0+build1.1-0ubuntu1
    • 1:91.4.0+build2-0ubuntu1
    Affected ranges
    • ECOSYSTEM: < 1:91.5.0+build1-0ubuntu1

    Update to 1:91.5.0+build1-0ubuntu1

Original sources

Check your server →