CVE-2021-4221

MEDIUM Year: 2021
CVSS v3 Score
4.3
Medium
Weakness Type
CWE-1007
View all →

Vulnerability Description

If a domain name contained a RTL character, it would cause the domain to be rendered to the right of the path. This could lead to user confusion and spoofing attacks. <br>*This bug only affects Firefox for Android. Other operating systems are unaffected.*<br>*Note*: Due to a clerical error this advisory was not included in the original announcement, and was added in Feburary 2022. This vulnerability affects Firefox < 92.

Related Vulnerabilities

CVE-2025-0996

MEDIUM
CVSS:5.4(Medium)

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromiu...

CWE-10072025

CVE-2025-0996

MEDIUM
CVSS:5.4(Medium)

Inappropriate implementation in Browser UI in Google Chrome on Android prior to 133.0.6943.98 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromiu...

CWE-10072025

CVE-2025-27611

HIGH

base-x is a base encoder and decoder of any given alphabet using bitcoin style leading zero compression. Versions 4.0.0, 5.0.0, and all prior to 3.0.11, are vulnerable to attackers potentially deceivi...

CWE-10072025