Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-26950HistoryDec 09, 2020 - 1:15 a.m.
CVE-2020-26950
2020-12-0901:15:12
Debian Security Bug Tracker
security-tracker.debian.org
25
mcallgetproperty
use-after-free
firefox
thunderbird
vulnerability
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.916
Percentile
99.0%
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 999 | all | firefox | < 82.0.3-1 | firefox_82.0.3-1_all.deb |
| Debian | 12 | all | firefox-esr | < 78.4.1esr-1 | firefox-esr_78.4.1esr-1_all.deb |
| Debian | 11 | all | firefox-esr | < 78.4.1esr-1 | firefox-esr_78.4.1esr-1_all.deb |
| Debian | 999 | all | firefox-esr | < 78.4.1esr-1 | firefox-esr_78.4.1esr-1_all.deb |
| Debian | 13 | all | firefox-esr | < 78.4.1esr-1 | firefox-esr_78.4.1esr-1_all.deb |
| Debian | 12 | all | thunderbird | < 1:78.4.2-1 | thunderbird_1:78.4.2-1_all.deb |
| Debian | 11 | all | thunderbird | < 1:78.4.2-1 | thunderbird_1:78.4.2-1_all.deb |
| Debian | 999 | all | thunderbird | < 1:78.4.2-1 | thunderbird_1:78.4.2-1_all.deb |
| Debian | 13 | all | thunderbird | < 1:78.4.2-1 | thunderbird_1:78.4.2-1_all.deb |
Related
nessus
nessus
Mozilla Firefox ESR < 78.4.1
2020-11-09 00:00:00
RHEL 6 : firefox (RHSA-2020:5104)
2020-11-12 00:00:00
Debian DSA-4790-1 : thunderbird - security update
2020-11-17 00:00:00
debian
debian
[SECURITY] [DSA 4790-1] thunderbird security update
2020-11-12 21:40:43
[SECURITY] [DSA 4788-1] firefox-esr security update
2020-11-10 18:53:26
[SECURITY] [DLA 2449-1] thunderbird security update
2020-11-13 10:41:43
redhat
redhat
(RHSA-2020:5146) Important: thunderbird security update
2020-11-18 13:37:24
(RHSA-2020:5104) Critical: firefox security update
2020-11-12 14:22:08
(RHSA-2020:5164) Important: thunderbird security update
2020-11-23 08:24:38
openvas
openvas
Debian: Security Advisory (DSA-4788-1)
2020-11-12 00:00:00
Mozilla Firefox ESR Security Advisories (MFSA2020-49, MFSA2020-49) - Windows
2020-11-10 00:00:00
Mozilla Firefox Security Advisory (MFSA2020-49) - Mac OS X
2020-11-10 00:00:00
osv
osv
thunderbird - security update
2020-11-13 00:00:00
firefox-esr - security update
2020-11-10 00:00:00
thunderbird - security update
2020-11-12 00:00:00
cvelist
cvelist
CVE-2020-26950
2020-12-09 00:19:22
kaspersky
kaspersky
KLA11994 Use after free vulnerability in Mozilla Thunderbird
2020-11-09 00:00:00
KLA11996 Use after free vulnerability in Mozilla Firefox ESR
2020-11-09 00:00:00
KLA11995 Use after free vulnerability in Mozilla Firefox
2020-11-09 00:00:00
oraclelinux
oraclelinux
firefox security update
2020-11-17 00:00:00
thunderbird security update
2020-11-19 00:00:00
thunderbird security update
2020-11-24 00:00:00
mozilla
mozilla
veracode
veracode
Denial Of Service (DoS)
2020-11-13 07:27:01
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 78.4.1-alt1
2020-11-10 00:00:00
Security fix for the ALT Linux 10 package thunderbird version 78.4.2-alt1
2020-11-11 00:00:00
nvd
nvd
CVE-2020-26950
2020-12-09 01:15:12
alpinelinux
alpinelinux
CVE-2020-26950
2020-12-09 01:15:12
centos
centos
firefox security update
2020-11-19 13:49:09
mageia
mageia
Updated firefox and thunderbird packages fix a security vulnerability
2020-11-14 00:20:36
suse
suse
Security update for MozillaThunderbird (moderate)
2020-12-01 00:00:00
Security update for MozillaFirefox (important)
2020-11-14 00:00:00
Security update for MozillaFirefox (important)
2020-11-14 00:00:00
redhatcve
redhatcve
CVE-2020-26950
2020-11-10 09:29:06
malwarebytes
malwarebytes
Mozilla patches critical security issues in Firefox and Thunderbird
2020-11-10 15:22:29
packetstorm
packetstorm
Firefox MCallGetProperty Write Side Effects Use-After-Free
2022-03-01 00:00:00
prion
prion
Race condition
2020-12-09 01:15:00
archlinux
archlinux
[ASA-202011-6] firefox: arbitrary code execution
2020-11-10 00:00:00
ubuntu
ubuntu
Firefox vulnerability
2020-11-10 00:00:00
Thunderbird vulnerabilities
2020-11-25 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox Use After Free (CVE-2020-26950)
2022-05-08 00:00:00
ibm
ibm
cve
cve
CVE-2020-26950
2020-12-09 01:15:12
zdt
zdt
Firefox MCallGetProperty Write Side Effects Use-After-Free Exploit
2022-03-02 00:00:00
gentoo
gentoo
Mozilla Firefox: Remote code execution
2020-11-11 00:00:00
ubuntucve
ubuntucve
CVE-2020-26950
2020-11-10 00:00:00
metasploit
metasploit
Firefox MCallGetProperty Write Side Effects Use After Free Exploit
2022-02-16 08:33:24
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2022-03-04 21:52:42
amazon
amazon
Critical: thunderbird
2020-12-08 21:30:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS
0.916
Percentile
99.0%
Related for DEBIANCVE:CVE-2020-26950