CVE-2020-15663

🗓️ 01 Oct 2020 19:15:12Reported by [email protected]Type

If Firefox is installed in a user-writable directory, the Mozilla Maintenance Service can execute updater.exe with system privileges, allowing arbitrary code execution

Reporter	Title	Published	Views	Family All 85
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.2.1-alt1	2 Sep 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.2.0-alt1	25 Aug 202000:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 68.12.0 ESR + CVE-2020-15664) hava affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF11 + ICAM2019.3.0 - 2020.2.0	27 Sep 202009:09	–	ibm
AlpineLinux	CVE-2020-15663	1 Oct 202018:43	–	alpinelinux
BDU FSTEC	The vulnerability in the Maintenance Service of Mozilla Firefox, Mozilla Firefox ESR, and the Thunderbird email client for Windows allows a malicious actor to execute arbitrary code with elevated privileges.	28 Sep 202200:00	–	bdu_fstec
CVE	CVE-2020-15663	1 Oct 202018:43	–	cve
Cvelist	CVE-2020-15663	1 Oct 202018:43	–	cvelist
Debian CVE	CVE-2020-15663	1 Oct 202018:43	–	debiancve
EUVD	EUVD-2020-7650	7 Oct 202500:30	–	euvd
Kaspersky	KLA11942 Multiple vulnerabilities in Mozilla Firefox	25 Aug 202000:00	–	kaspersky

NVD

Node

mozilla firefoxRange<80.0

mozilla firefoxRange78.0–78.2

mozilla firefox_esrRange68.0–68.12

mozilla thunderbirdRange68.0–68.12

mozilla thunderbirdRange78.0–78.2

Source	Link
mozilla	www.mozilla.org/security/advisories/mfsa2020-41/
mozilla	www.mozilla.org/security/advisories/mfsa2020-37/
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
mozilla	www.mozilla.org/security/advisories/mfsa2020-40/
mozilla	www.mozilla.org/security/advisories/mfsa2020-36/
mozilla	www.mozilla.org/security/advisories/mfsa2020-38/

17 Jun 2026 02:57Current

CVSS 3.18.8

CVSS 29.3

EPSS0.02716

CWE-427