Exploited Vulnerabilities Daily
🌐 English

Home › Mozilla

CVE-2020-6820: Mozilla Firefox and Thunderbird

EPSS7.0%No. 1360 of 1739 in KEV
CVE year2020~1 yrs before listing
Same vendor in KEV13
Same product6
FieldValue
VendorMozilla
ProductFirefox and Thunderbird
NameMozilla Firefox And Thunderbird Use-After-Free Vulnerability
Added to KEV2021-11-03
US federal due date2022-05-03
Ransomware useUnknown
CWECWE-362

CISA description

Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.

Other entries for this product

CVEVendor / productAddedEPSSRansomware
CVE-2019-11708Mozilla Firefox and Thunderbird2022-05-2355.8%Unknown
CVE-2019-11707Mozilla Firefox and Thunderbird2022-05-2337.6%Unknown
CVE-2013-1690Mozilla Firefox and Thunderbird2022-03-2869.0%Unknown
CVE-2020-6819Mozilla Firefox and Thunderbird2021-11-033.0%Unknown
CVE-2019-17026Mozilla Firefox and Thunderbird2021-11-0346.3%Unknown

NVD — CVE-2020-6820

Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page

A Mozilla Firefox and Thunderbird vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2021-11-03.