Lucene search
Ubuntu.comUB:CVE-2020-15676HistorySep 25, 2020 - 12:00 a.m.
CVE-2020-15676
2020-09-2500:00:00
ubuntu.com
ubuntu.com
10
0.006 Low
EPSS
Percentile
77.8%
Firefox sometimes ran the onload handler for SVG elements that the DOM
sanitizer decided to remove, resulting in JavaScript being executed after
pasting attacker-controlled data into a contenteditable element. This
vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR <
78.3.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 81.0+build2-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 81.0+build2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 20.10 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 21.04 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 21.10 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 22.04 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 22.10 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 23.04 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 23.10 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
| ubuntu | 24.04 | noarch | firefox | < 81.0+build2-0ubuntu1 | UNKNOWN |
References
launchpad.net/bugs/cve/CVE-2020-15676
nvd.nist.gov/vuln/detail/CVE-2020-15676
security-tracker.debian.org/tracker/CVE-2020-15676
ubuntu.com/security/notices/USN-4546-1
www.cve.org/CVERecord?id=CVE-2020-15676
www.mozilla.org/en-US/security/advisories/mfsa2020-42/#CVE-2020-15676
www.mozilla.org/en-US/security/advisories/mfsa2020-43/#CVE-2020-15676
www.mozilla.org/en-US/security/advisories/mfsa2020-44/#CVE-2020-15673
Related
prion
prion
Design/Logic Flaw
2020-10-01 19:15:00
veracode
veracode
Cross-site Scripting (XSS)
2020-09-24 10:29:33
cvelist
cvelist
CVE-2020-15676
2020-10-01 18:31:41
debiancve
debiancve
CVE-2020-15676
2020-10-01 19:15:00
cve
cve
CVE-2020-15676
2020-10-01 19:15:00
redhatcve
redhatcve
CVE-2020-15676
2020-09-22 20:48:04
alpinelinux
alpinelinux
CVE-2020-15676
2020-10-01 19:15:00
nessus
nessus
Debian DLA-2408-1 : thunderbird security update
2020-10-19 00:00:00
Debian DSA-4770-1 : thunderbird - security update
2020-10-07 00:00:00
Mozilla Firefox ESR < 78.3
2020-09-22 00:00:00
osv
osv
firefox-esr - security update
2020-09-28 00:00:00
thunderbird - security update
2020-10-17 00:00:00
thunderbird - security update
2020-10-06 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 78.3.0-alt1
2020-09-25 00:00:00
Security fix for the ALT Linux 10 package firefox-esr version 78.3.0-alt1
2020-09-23 00:00:00
redhat
redhat
(RHSA-2020:3833) Important: firefox security update
2020-09-24 09:41:12
(RHSA-2020:4158) Important: thunderbird security update
2020-10-01 12:56:42
(RHSA-2020:3834) Important: firefox security update
2020-09-24 09:41:24
openvas
openvas
Debian: Security Advisory (DLA-2408-1)
2020-10-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2020:2747-1)
2021-06-09 00:00:00
oraclelinux
oraclelinux
firefox security update
2020-11-14 00:00:00
thunderbird security update
2020-10-04 00:00:00
firefox security update
2020-09-24 00:00:00
kaspersky
kaspersky
KLA11966 Multiple vulnerabilities in Mozilla Thunderbird
2020-09-22 00:00:00
KLA11964 Multiple vulnerabilities in Mozilla Firefox ESR
2020-09-22 00:00:00
KLA11963 Multiple vulnerabilities in Mozilla Firefox
2020-09-22 00:00:00
debian
debian
[SECURITY] [DSA 4768-1] firefox-esr security update
2020-09-28 18:14:00
[SECURITY] [DSA 4770-1] thunderbird security update
2020-10-06 20:35:46
[SECURITY] [DLA 2387-1] firefox-esr security update
2020-09-28 21:34:41
ibm
ibm
suse
suse
Security update for MozillaFirefox (important)
2020-09-29 00:00:00
Security update for MozillaFirefox (important)
2020-09-28 00:00:00
Security update for MozillaThunderbird and mozilla-nspr (important)
2020-10-31 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 78.3 — Mozilla
2020-09-22 00:00:00
Security Vulnerabilities fixed in Firefox ESR 78.3 — Mozilla
2020-09-22 00:00:00
Security Vulnerabilities fixed in Firefox 81 — Mozilla
2020-09-22 00:00:00
gentoo
gentoo
Mozilla Firefox, Mozilla Thunderbird: Multiple vulnerabilities
2020-10-17 00:00:00
mageia
mageia
Updated firefox packages fix security vulnerabilities
2020-09-30 13:01:40
Updated Thunderbird packages fix security vulnerabilities
2020-09-30 13:01:40
ubuntu
ubuntu
Firefox vulnerabilities
2020-09-28 00:00:00
threatpost
threatpost
Firefox 81 Release Kills High-Severity Code-Execution Bugs
2020-09-22 15:14:43
archlinux
archlinux
[ASA-202009-10] firefox: multiple issues
2020-09-23 00:00:00
amazon
amazon
Critical: thunderbird
2020-12-08 21:30:00
rosalinux
rosalinux
Advisory ROSA-SA-2021-1835
2021-07-02 16:43:38