Red Hat Security Advisory

RHSA-2020:1340

firefox security update

Released 2020-04-07 · Red Hat rating Critical · View on Red Hat →

Fixed in

TI-2020-05529 CVE-2020-6820 · GHSA-f77r-rqc9-53hh

CRITICAL 94KEV

Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.07063 Published 2020-04-24 Partial fix · 68.7.0, 74.0.1 +1 CWE-362

TI-2020-05528 CVE-2020-6819 · GHSA-cv8q-mpvf-42h2

CRITICAL 94KEV

Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-free.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03039 Published 2020-04-24 Partial fix · 68.7.0, 74.0.1 +1 CWE-416