CVE-2021-24001: Mozilla Firefox

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations. This vulnerability affects Firefox < 88.

Affected products

• Mozilla Firefox: before 88.0 (fixed in 88.0)

Published 2021-06-24. Last modified 2026-06-17.