{"id":"CVE-2021-4127","aliases":["DEBIAN-CVE-2021-4127","DSA-4874-1","DSA-4876-1","EUVD-2021-34001","GHSA-7wp9-fj5q-c4jc","MGASA-2021-0163","MGASA-2021-0164","RHSA-2021:0989","RHSA-2021:0990","RHSA-2021:0991","RHSA-2021:0992","RHSA-2021:0993","RHSA-2021:0994","RHSA-2021:0995","RHSA-2021:0996"],"status":"published","title":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially...","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00945,"percentile":0.61372,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-03-24T00:00:00Z","modified":"2026-10-23T18:03:38Z","fixes":[{"ecosystem":"Debian:12","package":"firefox-esr","fixed_in":["78.9.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"firefox-esr","fixed_in":["78.9.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"firefox-esr","fixed_in":["78.9.0esr-1"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"thunderbird","fixed_in":["1:78.9.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"thunderbird","fixed_in":["1:78.9.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"thunderbird","fixed_in":["1:78.9.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0esr-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:78.9.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:78.9.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:78.9.0-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"firefox-esr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0esr-1~deb10u1"}]}],"versions":["60.7.2esr-1","60.8.0esr-1","60.8.0esr-1~deb10u1","60.8.0esr-1~deb8u1","60.8.0esr-1~deb9u1","60.9.0esr-1~deb10u1","60.9.0esr-1~deb8u1","60.9.0esr-1~deb8u2","60.9.0esr-1~deb9u1","68.0.2esr-1","68.1.0esr-1","68.10.0esr-1","68.10.0esr-1~deb10u1","68.10.0esr-1~deb9u1","68.11.0esr-1","68.11.0esr-1~deb10u1","68.11.0esr-1~deb9u1","68.12.0esr-1","68.12.0esr-1~deb10u1","68.12.0esr-1~deb9u1","68.2.0esr-1","68.2.0esr-1~deb10u1","68.2.0esr-1~deb8u1","68.2.0esr-1~deb9u1","68.2.0esr-1~deb9u2","68.3.0esr-1","68.3.0esr-1~deb10u1","68.3.0esr-1~deb8u1","68.3.0esr-1~deb9u1","68.4.0esr-1","68.4.0esr-1~deb10u1","68.4.0esr-1~deb8u1","68.4.0esr-1~deb9u1","68.4.1esr-1","68.4.1esr-1~deb10u1","68.4.1esr-1~deb8u1","68.4.1esr-1~deb9u1","68.4.2esr-1","68.5.0esr-1","68.5.0esr-1~deb10u1","68.5.0esr-1~deb8u1","68.5.0esr-1~deb9u1","68.6.0esr-1","68.6.0esr-1~deb10u1","68.6.0esr-1~deb8u1","68.6.0esr-1~deb9u1","68.6.1esr-1","68.6.1esr-1~deb10u1","68.6.1esr-1~deb9u1","68.7.0esr-1","68.7.0esr-1~deb10u1","68.7.0esr-1~deb8u1","68.7.0esr-1~deb9u1","68.8.0esr-1","68.8.0esr-1~deb10u1","68.8.0esr-1~deb8u1","68.8.0esr-1~deb9u1","68.9.0esr-1","68.9.0esr-1~deb10u1","68.9.0esr-1~deb8u1","68.9.0esr-1~deb8u2","68.9.0esr-1~deb9u1","78.2.0esr-1","78.3.0esr-1","78.3.0esr-1~deb10u1","78.3.0esr-1~deb9u1","78.3.0esr-1~deb9u2","78.3.0esr-2","78.4.0esr-1","78.4.0esr-1~deb10u1","78.4.0esr-1~deb10u2","78.4.0esr-1~deb9u1","78.4.0esr-2","78.4.1esr-1","78.4.1esr-1~deb10u1","78.4.1esr-1~deb9u1","78.4.1esr-2","78.5.0esr-1","78.5.0esr-1~deb10u1","78.5.0esr-1~deb9u1","78.6.0esr-1","78.6.0esr-1~deb10u1","78.6.0esr-1~deb9u1","78.6.1esr-1","78.6.1esr-1~deb10u1","78.6.1esr-1~deb9u1","78.7.0esr-1","78.7.0esr-1~deb10u1","78.7.0esr-1~deb9u1","78.8.0esr-1","78.8.0esr-1~deb10u1","78.8.0esr-1~deb9u1","78.9.0esr-1~deb9u1"],"bundled":6},{"source":"osv","ecosystem":"Debian:10","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:78.9.0-1~deb10u1"}]}],"versions":["1:60.7.2-1","1:60.8.0-1","1:60.8.0-1~deb10u1","1:60.8.0-1~deb8u1","1:60.8.0-1~deb9u1","1:60.8.0-2","1:60.9.0-1","1:60.9.0-1~deb10u1","1:60.9.0-1~deb8u1","1:60.9.0-1~deb9u1","1:65.0~b1-1","1:66.0~b1-1","1:67.0~b3-1","1:68.0~b1-1","1:68.1.1-1~exp1","1:68.1.2-1~exp1","1:68.10.0-1","1:68.10.0-1~deb10u1","1:68.10.0-1~deb9u1","1:68.11.0-1","1:68.11.0-1~deb10u1","1:68.11.0-1~deb9u1","1:68.11.0-2","1:68.11.0-3","1:68.12.0-1","1:68.12.0-1~deb10u1","1:68.12.0-1~deb9u1","1:68.12.0-1~deb9u2","1:68.2.1-1","1:68.2.2-1","1:68.2.2-1~deb10u1","1:68.2.2-1~deb8u1","1:68.2.2-1~deb9u1","1:68.3.0-1","1:68.3.0-2","1:68.3.0-2~deb10u1","1:68.3.0-2~deb8u1","1:68.3.0-2~deb9u1","1:68.3.1-1","1:68.4.1-1","1:68.4.1-1~deb10u1","1:68.4.1-1~deb8u1","1:68.4.1-1~deb9u1","1:68.4.2-1","1:68.5.0-1","1:68.5.0-1~deb10u1","1:68.5.0-1~deb8u1","1:68.5.0-1~deb9u1","1:68.6.0-1","1:68.6.0-1~deb10u1","1:68.6.0-1~deb8u1","1:68.6.0-1~deb9u1","1:68.7.0-1","1:68.7.0-1~deb10u1","1:68.7.0-1~deb8u1","1:68.7.0-1~deb9u1","1:68.8.0-1","1:68.8.0-1~deb10u1","1:68.8.0-1~deb8u1","1:68.8.0-1~deb9u1","1:68.8.1-1","1:68.9.0-1","1:68.9.0-1~deb10u1","1:68.9.0-1~deb8u1","1:68.9.0-1~deb8u2","1:68.9.0-1~deb9u1","1:76.0~b1-1","1:76.0~b2-1","1:77.0~b1-1","1:77.0~b2-1","1:77.0~b3-1","1:78.0-1","1:78.0.1-1","1:78.0~b1-1","1:78.0~b2-1","1:78.1.0-1","1:78.1.1-1","1:78.2.0-1","1:78.2.1-1","1:78.2.2-1","1:78.3.1-1","1:78.3.1-2","1:78.3.1-2~deb10u1","1:78.3.1-2~deb10u2","1:78.3.1-2~deb9u1","1:78.3.2-1","1:78.3.3-1","1:78.4.0-1","1:78.4.0-1~deb10u1","1:78.4.0-1~deb9u1","1:78.4.1-1","1:78.4.2-1","1:78.4.2-1~deb10u1","1:78.4.2-1~deb9u1","1:78.5.0-1","1:78.5.0-1~deb10u1","1:78.5.0-1~deb9u1","1:78.5.1-1","1:78.5.1-1~deb10u1","1:78.5.1-1~deb9u1","1:78.6.0-1","1:78.6.0-1~deb10u1","1:78.6.0-1~deb9u1","1:78.6.1-1","1:78.7.0-1","1:78.7.0-1~deb10u1","1:78.7.0-1~deb9u1","1:78.7.1-1","1:78.8.0-1","1:78.8.0-1~deb10u1","1:78.8.0-1~deb9u1","1:78.9.0-1~deb9u1"],"bundled":6},{"source":"osv","ecosystem":"Mageia:7","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.63.0-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:7","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.30-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:7","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:7","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"nss","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.63.0-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"nspr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.30-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"firefox-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:7","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:7","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga7"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird-l10n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Mageia:8","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"78.9.0-1.mga8"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"firefox-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el8_1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"firefox-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-1.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_3"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_2"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"thunderbird-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el8_1"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el7_9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"thunderbird-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:78.9.0-3.el7_9"}]}],"bundled":5}],"products":[{"vendor":"mozilla","product":"firefox esr"},{"vendor":"mozilla","product":"firefox_esr"},{"vendor":"mozilla","product":"thunderbird"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2021-12/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2021-11/","tags":["x_transferred","Vendor Advisory","advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1691547","tags":["x_transferred","Exploit","Issue Tracking","Patch","Vendor Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4127","tags":["advisory"]},{"url":"https://www.mozilla.org/security/advisories/mfsa2021-11"},{"url":"https://www.mozilla.org/security/advisories/mfsa2021-12"},{"url":"https://github.com/advisories/GHSA-7wp9-fj5q-c4jc"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-4127","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2021-0163.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28641","tags":["report"]},{"url":"https://www.mozilla.org/en-US/firefox/78.9.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/","tags":["advisory"]},{"url":"https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.63_release_notes","tags":["web"]},{"url":"https://groups.google.com/g/mozilla.dev.tech.nspr/c/wwXfLFWZRlA","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2021-0164.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=28642","tags":["report"]},{"url":"https://www.thunderbird.net/en-US/thunderbird/78.9.0/releasenotes/","tags":["web"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0989","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942787","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0989.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1942784","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4127","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-4127","tags":["article"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-12/#CVE-2021-4127","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23981","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23981","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23981","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23981","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23982","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23982","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23982","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23982","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23984","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23984","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23984","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23987","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23987","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23987","tags":["advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2021-11/#CVE-2021-23987","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0990","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0990.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0991","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0991.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0992","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0992.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0993","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0993.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0994","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0994.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0995","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0995.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:0996","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_0996.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2021-4127","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","status":"published","published":"2022-12-22T00:00:00Z","modified":"2025-04-16T15:51:21.077Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"updated_at":"2026-11-02T14:33:07.697752Z"}],"euvd":[{"id":"EUVD-2021-34001","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","status":"published","published":"2022-12-22T00:00:00Z","modified":"2025-04-16T15:51:21Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:24.837818Z"}],"ghsa":[{"id":"GHSA-7wp9-fj5q-c4jc","title":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially...","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","status":"published","published":"2022-12-22T21:30:31Z","modified":"2025-04-16T18:32:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:01:35.379285Z"}],"nvd":[{"id":"CVE-2021-4127","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","status":"published","published":"2022-12-22T20:15:11.787Z","modified":"2026-06-17T04:19:04.86Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"updated_at":"2026-11-02T14:07:07.323379Z"}],"osv":[{"id":"CVE-2021-4127","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","status":"published","published":"2022-12-22T20:15:11.787Z","modified":"2026-04-16T04:44:11.114842374Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:21.557945Z"},{"id":"DEBIAN-CVE-2021-4127","description":"An out of date graphics library (Angle) likely contained vulnerabilities that could potentially be exploited. This vulnerability affects Thunderbird \u003c 78.9 and Firefox ESR \u003c 78.9.","status":"published","published":"2022-12-22T20:15:11.787Z","modified":"2026-10-23T18:03:38.895357704Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:35.521549Z"},{"id":"RHSA-2021:0989","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T05:34:58Z","modified":"2025-11-22T12:18:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0990","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T05:34:51Z","modified":"2025-11-22T12:18:36Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0991","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T05:35:32Z","modified":"2025-11-22T12:18:37Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0992","title":"Red Hat Security Advisory: firefox security update","status":"published","published":"2024-09-16T05:35:19Z","modified":"2026-06-26T10:53:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0993","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T05:35:06Z","modified":"2025-11-22T12:18:38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0994","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T05:35:25Z","modified":"2025-11-22T12:18:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0995","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T05:35:12Z","modified":"2025-11-22T12:18:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"RHSA-2021:0996","title":"Red Hat Security Advisory: thunderbird security update","status":"published","published":"2024-09-16T05:35:40Z","modified":"2026-06-26T10:53:34Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.071325Z"},{"id":"DSA-4874-1","title":"firefox-esr - security update","status":"published","published":"2021-03-24T00:00:00Z","modified":"2026-03-09T02:09:11.732002Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"DSA-4876-1","title":"thunderbird - security update","status":"published","published":"2021-03-25T00:00:00Z","modified":"2026-03-09T02:10:03.977197Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"MGASA-2021-0163","title":"Updated firefox packages fix security vulnerabilities","description":"Texture upload into an unbound backing buffer resulted in an out-of-bound read.\n(CVE-2021-23981)\n\nAngle graphics library out of date. (CVE-2021-4127)\n\nInternal network hosts could have been probed by a malicious webpage.\n(CVE-2021-23982)\n\nMalicious extensions could have spoofed popup information. (CVE-2021-23984)\n\nMemory safety bugs fixed in Firefox 87 and Firefox ESR 78.9 (CVE-2021-23987).\n","status":"published","published":"2021-03-30T20:08:49Z","modified":"2026-04-16T04:42:55.185551307Z","updated_at":"2026-11-02T15:49:41.509337Z"},{"id":"MGASA-2021-0164","title":"Updated thunderbird packages fix security vulnerabilities","description":"Texture upload into an unbound backing buffer resulted in an out-of-bound read.\n(CVE-2021-23981)\n\nAngle graphics library out of date. (CVE-2021-4127)\n\nInternal network hosts could have been probed by a malicious webpage. (CVE-2021-23982)\n\nMalicious extensions could have spoofed popup information. (CVE-2021-23984)\n\nMemory safety bugs fixed in Thunderbird 78.9. (CVE-2021-23987)\n","status":"published","published":"2021-03-30T20:08:49Z","modified":"2026-04-16T04:40:43.009947086Z","updated_at":"2026-11-02T15:49:41.509337Z"}]}}