Read the docs
Red Hat Security Advisory

RHSA-2020:0519

firefox security update

Released 2020-02-18 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2020-05510 CVE-2020-6800 · GHSA-qjg6-3pj8-cqgj

Out-of-bounds write in Mozilla Thunderbird

Priority MEDIUM 42

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02263 Published 2020-03-02 Partial fix · 68.5, 73 +1 CWE-787
TI-2020-05506 CVE-2020-6796 · GHSA-mx5h-crf7-xxv9

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 41

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01371 Published 2020-03-02 Partial fix · 73, ESR68.5 CWE-787
TI-2020-05508 CVE-2020-6798 · GHSA-qwm2-p76q-cw3g

Cross-site scripting in Mozilla Thunderbird

Priority LOW 31

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02046 Published 2020-03-02 Partial fix · 68.5, 73 +1 CWE-79