CVE-2021-38505

 

Published at: - 08-12-2021 11:15

Last modified: - 22-11-2022 05:52

Total changes: - 7

Description

Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to the clipboard to the cloud, and make it available on other computers in certain scenarios. Applications that wish to prevent copied data from being recorded in Cloud History must use specific clipboard formats; and Firefox before versions 94 and ESR 91.3 did not implement them. This could have caused sensitive data to be recorded to a user's Microsoft account. *This bug only affects Firefox for Windows 10+ with Cloud Clipboard enabled. Other operating systems are unaffected.*. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://www.mozilla.org/security/advisories/mfsa2021-50/
• https://www.mozilla.org/security/advisories/mfsa2021-49/
• https://bugzilla.mozilla.org/show_bug.cgi?id=1730194
• https://www.mozilla.org/security/advisories/mfsa2021-48/

 

Keywords

NVD

 

CVE-2021-38505

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures