Vulnerability Details : CVE-2020-15656
JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.
Products affected by CVE-2020-15656
- cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*
- cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
- cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
- cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-15656
0.67%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 69 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-15656
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
9.3
|
HIGH | AV:N/AC:M/Au:N/C:C/I:C/A:C |
8.6
|
10.0
|
NIST | |
|
8.8
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
2.8
|
5.9
|
NIST |
CWE ids for CVE-2020-15656
-
The product allocates or initializes a resource such as a pointer, object, or variable using one type, but it later accesses that resource using a type that is incompatible with the original type.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-15656
-
http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html
[security-announce] openSUSE-SU-2020:1189-1: important: Security updateThird Party Advisory
-
https://www.mozilla.org/security/advisories/mfsa2020-32/
Security Vulnerabilities fixed in Firefox ESR 78.1 — MozillaVendor Advisory
-
https://usn.ubuntu.com/4443-1/
USN-4443-1: Firefox vulnerabilities | Ubuntu security notices | UbuntuThird Party Advisory
-
https://bugzilla.mozilla.org/show_bug.cgi?id=1647293
Access DeniedIssue Tracking;Permissions Required;Vendor Advisory
-
https://www.mozilla.org/security/advisories/mfsa2020-33/
Security Vulnerabilities fixed in Thunderbird 78.1 — MozillaVendor Advisory
-
https://www.mozilla.org/security/advisories/mfsa2020-30/
Security Vulnerabilities fixed in Firefox 79 — MozillaVendor Advisory
Jump to