CVE-2021-23957

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 85

Description The issue is related to errors in privilege management within the isolated environment of the Firefox for Android browser's iframe. It could allow a remote attacker to impact data integrity. The vulnerability can be exploited through navigations using the Android-specific intent URL scheme, potentially allowing an attacker to escape the iframe sandbox.

Recommendations For versions prior to 85, update to version 85 or later to resolve the issue. As a temporary workaround, consider restricting access to the intent URL scheme to minimize the risk of exploitation.