CVE-2021-38492

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 92 Thunderbird versions prior to 91.1 Thunderbird versions prior to 78.14 Firefox ESR versions prior to 78.14 Firefox ESR versions prior to 91.1

Description When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows, with other operating systems being unaffected.

Recommendations For Firefox versions prior to 92, update to version 92 or later. For Thunderbird versions prior to 91.1, update to version 91.1 or later. For Thunderbird versions prior to 78.14, update to version 78.14 or later. For Firefox ESR versions prior to 78.14, update to version 78.14 or later. For Firefox ESR versions prior to 91.1, update to version 91.1 or later.