Read the docs
Red Hat Security Advisory

RHSA-2020:3254

firefox security update

Released 2020-07-30 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2020-05313 CVE-2020-6463 · GHSA-vmqg-547g-3f2r

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.03265 Published 2020-05-21 Partial fix · 81.0.4044.122 CWE-416
TI-2020-12334 CVE-2020-15659 · GHSA-r2p6-cvv5-qcq5

Out-of-bounds write in Mozilla Firefox

Priority MEDIUM 43

Mozilla developers and community members reported memory safety bugs present in Firefox 78 and Firefox ESR 78.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02391 Published 2020-08-10 Partial fix · 79, 68.11 +1 CWE-787
TI-2020-05363 CVE-2020-6514 · GHSA-7vv8-8vrw-6j74

Information disclosure in Google Chrome

Priority LOW 39

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to potentially exploit heap corruption via a crafted SCTP stream.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0779 Published 2020-07-22 Partial fix · 84.0.4147.89 CWE-200
TI-2020-12327 CVE-2020-15652 · GHSA-2wfj-m7vx-f7mf

Origin validation error in Mozilla Firefox

Priority LOW 31

By observing the stack trace for JavaScript errors in web workers, it was possible to leak the result of a cross-origin redirect.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01263 Published 2020-08-10 Partial fix · 79, 68.11 +1 CWE-346