CVE-2021-43544: Mozilla Firefox

Medium severity, CVSS 6.1. EPSS: 0.5% chance of exploitation in the next 30 days.

When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the address bar might have caused the URL to load unintentionally, which could lead to XSS and spoofing attacks. *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 95.

Affected products

• Mozilla Firefox: before 95.0 (fixed in 95.0)

Published 2021-12-08. Last modified 2026-06-17.