CVE-2021-29963

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 89 Firefox for Android versions prior to 89

Description The issue is related to insufficient authentication of data in the "Private Browsing" mode of Mozilla Firefox. It allows a remote attacker to cause a denial of service. The problem specifically affects the address bar search suggestions in private browsing mode, which were reusing session data from normal mode. This issue only affects Firefox for Android, with other operating systems being unaffected.

Recommendations For Firefox versions prior to 89, update to version 89 or later to resolve the issue. For Firefox for Android versions prior to 89, update to version 89 or later to resolve the issue. As a temporary workaround, consider disabling the address bar search suggestions in private browsing mode until a patch is available.