CVE-2021-29959

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 89

Description The issue is related to errors in authorization, allowing a remote attacker to bypass existing security restrictions. Specifically, when a user has already allowed a website to access the microphone and camera, disabling camera sharing does not fully prevent the website from re-enabling it without an additional prompt, provided the website continues recording with the microphone until the camera is re-enabled.

Recommendations For versions prior to 89, update to version 89 or later to resolve the issue. As a temporary workaround, consider restricting access to the microphone and camera for websites that do not require them to function properly. Avoid using the camera and microphone permissions in sensitive contexts until the issue is resolved.