Lucene search

K
cvelistMozillaCVELIST:CVE-2020-15654
HistoryAug 10, 2020 - 5:43 p.m.

CVE-2020-15654

2020-08-1017:43:24
mozilla
raw.githubusercontent.com
4

5.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

70.6%

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.