DEBIAN-CVE-2020-26974

🗓️ 07 Jan 2021 14:15:12Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Debian CVE-2020-26974: incorrect StyleGenericFlexBasis cast with flex-basis on a table wrapper causes heap use-after-free and crash in Firefox, Thunderbird, and Firefox ESR.

Reporter	Title	Published	Views	Family All 189
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Mozilla Firefox affect IBM Cloud Pak for Multicloud Management Monitoring	18 May 202111:41	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 78.9.0 ESR + CVE-2020-26974) have affected Synthetic Playback Agent 8.1.4.0-8.1.4 IF13 + CP4MCM2.2	12 May 202102:48	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 78.6.0-alt1	15 Dec 202000:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 78.6.0-alt1	14 Dec 202000:00	–	altlinux
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2021-1586)	7 Jan 202100:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2020:5562)	1 Feb 202100:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2020:5561)	9 Oct 202400:00	–	nessus
Tenable Nessus	CentOS 7 : thunderbird (RHSA-2020:5618)	22 Dec 202000:00	–	nessus
Tenable Nessus	Debian DLA-2496-1 : firefox-esr security update	17 Dec 202000:00	–	nessus
Tenable Nessus	Debian DLA-2497-1 : thunderbird security update	18 Dec 202000:00	–	nessus

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2020-26974

27 Aug 2026 13:02Current

8High risk

Vulners AI Score8

CVSS 3.18.8

EPSS0.01455