CVE-2021-29973

8.8 highEPSS 0.8%

High (8.8) in mozilla firefox. EPSS 0.8% chance of exploitation in the next 30 days.

Password autofill was enabled without user interaction on insecure websites on Firefox for Android. This was corrected to require user interaction with the page before a user's password would be entered by the browser's autofill functionality *This bug only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 90.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 56% of CVEs (scores of 2026-10-31)
Published: 2021-08-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1701932
https://www.mozilla.org/security/advisories/mfsa2021-28/
https://bugzilla.mozilla.org/show_bug.cgi?id=1701932
https://www.mozilla.org/security/advisories/mfsa2021-28/

Check your stack JSON