CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2020-04-24
Mozilla Firefox and Thunderbird ReadableStream Race Condition Use-After-Free Vulnerability (CVE-2020-6820)
[Affected Scope] Firefox < 74.0.1, Firefox ESR < 68.6.1, and Thunderbird < 68.7.0
[Impact] Remote attackers can execute arbitrary code or escape the browser sandbox via a race condition leading to a Use-After-Free (UAF) state, which has been actively exploited in targeted attacks
[Mitigation] Immediately upgrade all installations of Firefox, Firefox ESR, and Thunderbird to the latest patched versions