CVE-2021-36773

published 2021-07-18

CVE-2021-36773: uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to…

Priority P3 36 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

uBlock Origin before 1.36.2 and nMatrix before 4.4.9 support an arbitrary depth of parameter nesting for strict blocking, which allows crafted web sites to cause a denial of service (unbounded recursion that can trigger memory consumption and a loss of all blocking functionality).

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	debian_linux	—	—
debian	ublock-origin	< ublock-origin 1.37.0+dfsg-1 (bookworm)	ublock-origin 1.37.0+dfsg-1 (bookworm)
sciruby	nmatrix	< 4.4.9	4.4.9
ublockorigin	ublock_origin	< 1.36.2	1.36.2
umatrix_project	umatrix	< 1.4.2	1.4.2

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:N/I:N/A:P

osv 7.5 HIGH

vendor_debian 7.5 HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-674