Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Mozilla Firefox ESR, Thunderbird 68.12, 78.2 Clear all filters
TI-2020-12338 CVE-2020-15663 · GHSA-fj34-jgxp-cv4f

Uncontrolled search path in Mozilla Firefox

Priority MEDIUM 43

If Firefox is installed to a user-writable directory, the Mozilla Maintenance Service would execute updater.exe from the install location with system privileges.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.02716 Published 2020-10-01 Fixed in 80, 78.2 +1 CWE-427
TI-2020-12339 CVE-2020-15664 · GHSA-f4gc-pc7j-rfxr

Incorrect authorization in Mozilla Firefox

Priority LOW 32

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01389 Published 2020-10-01 Partial fix · 80, 78.2 +1 CWE-863