Mozilla releases Firefox 91 with Windows SSO feature and 5 High risk security fixes

By / / Security Updates & Patches, Vulnerabilities & Exploits / CVE-2021-29980, CVE-2021-29984, CVE-2021-29986, CVE-2021-29988, CVE-2021-29989, Firefox 91, Mozilla
The Mozilla Foundation has released Firefox 91 that includes new security features and fixes for six vulnerabilities, five rated High severity.

The Mozilla Foundation has released Firefox 91 that includes new security features and fixes for six vulnerabilities, five rated High severity.

An attacker could exploit the vulnerabilities to take control of impacted systems.

The latest Firefox 91 includes a number of bug fixes, security patches and a new Windows single sign-on (SSO) feature.

“Windows SSO is a new feature starting in Firefox version 91 that allows you to login to Microsoft, work, and school accounts using credentials from your Windows 10 operating system. You can enable it by checking the checkbox in the Privacy & Security section in Firefox settings,” Mozilla wrote in a blog post.

As part of Mozilla Foundation Security Advisory 2021-34, Firefox 91 also includes fixes for the following five High severity vulnerabilities:

  1. CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption.
  2. CVE-2021-29988: Memory corruption as a result of incorrect style treatment.
  3. CVE-2021-29984: Incorrect instruction reordering during JIT optimization.
  4. CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption.
  5. CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13.

Mozilla warned that CVE-2021-29989 could be exploited to run arbitrary code. 

Mozilla also fixed one Moderate risk bugs in the latest Firefox 91 release.

Finally, Mozilla published new security update Firefox ESR 78.13 with three high severity vulnerability fixes.

Related Articles