CVE-2021-43546

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerability affects Thunderbird < 91.4.0, Firefox ESR < 91.4.0, and Firefox < 95.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-1021

Affected software

No affected versions have been published.

Timeline

Published
Dec 8, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-435478.2TwinOaks Computing CoreDX DDS versions prior to 5.9.1 are susceptible to exploitation when an attacker sends a specially crafted packet to fCVE-2021-435486.5Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that thCVE-2021-435494.8A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirectCVE-2021-43555.3The Welcart e-Commerce plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on the download_orderdetaCVE-2021-435506.5The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which CVE-2021-435515.4A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or delCVE-2021-435525.5The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient InformatiCVE-2021-435534.3PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and iCVE-2021-435547.8FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to an out-of-bounds write while processing project files, which may allow anCVE-2021-435557.8mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may make the product vulCVE-2021-435567.8FATEK WinProladder Versions 3.30_24518 and prior are vulnerable to a stack-based buffer overflow while processing project files, which may aCVE-2021-435577.5The uri-block plugin in Apache APISIX before 2.10.2 uses $request_uri without verification. The $request_uri is the full original request UR
CVE-2021-43546: Medium severity, CVSS 4.3 | Vulnix