CVE catalog

CVE-2021-29975

UBUNTU-CVE-2021-29975

[CVE catalog]

Severity
Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.96% · Oct 25, 2026

Through a series of DOM manipulations, a message, over which the attacker had control of the text but not HTML or formatting, could be overlaid on top of another domain (with the new domain correctly shown in the address bar) resulting in possible user confusion. This vulnerability affects Firefox < 90.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox18.0456.0+build6-0ubuntu1vulnerable
Ubuntufirefox18.0457.0.1+build2-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox18.0460.0+build2-0ubuntu1vulnerable
Ubuntufirefox18.0460.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0460.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.3vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.4vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.5vulnerable
Ubuntufirefox18.0462.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0463.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0463.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0464.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.4+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.5+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.4+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0471.0+build5-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0475.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0477.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0479.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0481.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0481.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0483.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0484.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0484.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0484.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0485.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0485.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0486.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0486.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0487.0+build3-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0488.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0488.0.1+build1-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0489.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0489.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0489.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0490.0+build1-0ubuntu0.18.04.1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0487.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0488.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0488.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0489.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0+build1-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb18.0490.0+build1-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2021-29975Not reported
Ubuntufirefoxdeb20.0490.0+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2021-29975Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References