VIR Vulnerability Intelligence Relay

CVE-2021-29973

high
Published — · Modified —
CVSS v3
—
CVSS v2
—
VIR risk
8.0

Description

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 90.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2021-29973

OS impact
OSVersionStatusFixed in
arch archfixed90.0-1
debian debiansidfixed0

References

Verify integrity in audit chain (admin only). AS-IS.