CVE catalog

CVE-2021-23974

UBUNTU-CVE-2021-23974

[CVE catalog]

Severity
Medium · CVSS 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.75% · Oct 25, 2026

The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0450.1.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0452.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0.2+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0453.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0454.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0455.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0455.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.6vulnerable
Ubuntufirefox16.0457.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0460.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0461.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0461.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0462.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0464.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0466.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.4+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.5+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0469.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0471.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0473.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0475.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0477.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0479.0+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0480.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0480.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0481.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0481.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0482.0+build2-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0482.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0482.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0483.0+build2-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0484.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0484.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0484.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0485.0+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0485.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0486.0+build3-0ubuntu0.16.04.1fixed
Ubuntufirefox18.0456.0+build6-0ubuntu1vulnerable
Ubuntufirefox18.0457.0.1+build2-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox18.0460.0+build2-0ubuntu1vulnerable
Ubuntufirefox18.0460.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0460.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.3vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.4vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.5vulnerable
Ubuntufirefox18.0462.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0463.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0463.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0464.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.4+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.5+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.4+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0471.0+build5-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0475.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0477.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0479.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0481.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0481.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0483.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0484.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0484.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0484.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0485.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0485.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0486.0+build3-0ubuntu0.18.04.1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb16.0486.0+build3-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2021-23974Not reported
Ubuntufirefoxdeb18.0486.0+build3-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2021-23974Not reported
Ubuntufirefoxdeb20.0486.0+build3-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2021-23974Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References