CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2020-68198.1/HIGHEPSS 3.0%CISA KEV
2020-04-24

Mozilla Firefox and Thunderbird nsDocShell Use-After-Free Remote Code Execution Vulnerability (CVE-2020-6819)

[Affected Scope] Firefox < 74.0.1, Firefox ESR < 68.6.1, and Thunderbird < 68.7.0

[Impact] A race condition leading to a Use-After-Free (UAF) allows remote attackers to execute arbitrary code or cause a Denial of Service (DoS) via targeted web-based exploits

[Mitigation] Immediately update all affected Mozilla browser and mail client installations to the latest patched versions

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse