CVE-2020-12396 PUBLISHED

Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 76.

EPSS 0.58% · 68.6th percentile

Risk Scores

EPSS Score
0.58%
68.6th percentile

Affected Products

VendorProductVersions
Ubuntu:18.04:LTSmozjs3838.8.0~repack1-0ubuntu4, 38.8.0~repack1-0ubuntu3, 38.8.0~repack1-0ubuntu1
Ubuntu:20.04:LTSfirefox74.0+build1-0ubuntu1, 73.0.1+build1-0ubuntu1, 73.0+build3-0ubuntu1
Ubuntu:16.04:LTSfirefox52.0.2+build1-0ubuntu0.16.04.1, 53.0+build6-0ubuntu0.16.04.1, 53.0.2+build1-0ubuntu0.16.04.2
Ubuntu:20.04:LTSmozjs520, 52.9.1-1ubuntu3, 52.9.1-1build1
Ubuntu:20.04:LTSmozjs6868.5.0-1~fakesync, 68.5.0-2~fakesync, 0
Ubuntu:18.04:LTSfirefox68.0+build3-0ubuntu0.18.04.1, 68.0.1+build1-0ubuntu0.18.04.1, 68.0.2+build1-0ubuntu0.18.04.1
Ubuntu:18.04:LTSmozjs5252.9.1-0ubuntu0.18.04.1, 52.8.1-0ubuntu0.18.04.1, 52.3.1-7fakesync1

Timeline

References

Open in Interactive Console →