Every CVE Search/ Get API key

CVE-2020-15664

By holding a reference to the eval() function from an about:blank window, a malicious webpage...

6.5 MediumFix available

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
None

Exploit likelihood

1.39%Down 0.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 6.5

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
CVE-2020-15664
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness
CWE-863
Updated
2026-11-02
CVE List No score

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
CVE-2020-15664
Updated
2026-11-02
EUVDEUVD-2020-7651 No score

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
EUVD-2020-7651
Updated
2026-11-03
GitHub AdvisoriesGHSA-f4gc-pc7j-rfxr 6.5

By holding a reference to the eval() function from an about:blank window, a malicious webpage...

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
GHSA-f4gc-pc7j-rfxr
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness
CWE-863
Updated
2026-11-02
OSVALPINE-CVE-2020-15664 6.5

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
ALPINE-CVE-2020-15664
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-03
OSV 6.5

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
CVE-2020-15664
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
Show 27 moreShow less
OSVDEBIAN-CVE-2020-15664 6.5

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
DEBIAN-CVE-2020-15664
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2020:3555 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2020:3555
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3556 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2020:3556
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3557 9.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2020:3557
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3558 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2020:3558
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3559 8.8

Red Hat Security Advisory: firefox security update

Record
RHSA-2020:3559
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3631 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2020:3631
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3632 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2020:3632
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3633 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2020:3633
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3634 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2020:3634
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2020:3643 8.8

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2020:3643
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-15664 6.5

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Record
UBUNTU-CVE-2020-15664
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Updated
2026-11-02
OSVMGASA-2020-0348 No score

Updated firefox packages fix security vulnerabilities

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code (CVE-2020-15669).

Record
MGASA-2020-0348
Updated
2026-11-02
OSVMGASA-2020-0352 No score

Updated thunderbird packages fix security vulnerabilities

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code (CVE-2020-15669).

Record
MGASA-2020-0352
Updated
2026-11-02
OSVopenSUSE-SU-2020:1383-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

  • Mozilla Thunderbird was updated to 68.12 (bsc#1175686)

  • CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege

  • CVE-2020-15664: Attacker-induced prompt for extension installation

  • CVE-2020-15669: Use-After-Free when aborting an operation

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1383-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1384-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.2.0 ESR

    • Fixed: Various stability, functionality, and security fixes

  • Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686)

    • CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
    • CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation
    • CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

  • Fixed Firefox tab crash in FIPS mode (bsc#1174284).

  • Fix broken translation-loading (bsc#1173991)

    • allow addon sideloading
    • mark signatures for langpacks non-mandatory
    • do not autodisable user profile scopes

  • Google API key is not usable for geolocation service any more

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1384-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1391-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.2.0 ESR

    • Fixed: Various stability, functionality, and security fixes

  • Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686)

    • CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
    • CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation
    • CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

  • Fixed Firefox tab crash in FIPS mode (bsc#1174284).

  • Fix broken translation-loading (bsc#1173991)

    • allow addon sideloading
    • mark signatures for langpacks non-mandatory
    • do not autodisable user profile scopes

  • Google API key is not usable for geolocation service any more

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1391-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1392-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

  • Mozilla Thunderbird was updated to 68.12 (bsc#1175686)

  • CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege

  • CVE-2020-15664: Attacker-induced prompt for extension installation

  • CVE-2020-15669: Use-After-Free when aborting an operation

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2020:1392-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score

MozillaThunderbird-91.1.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10601-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2020:14489-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.2.0 ESR

    • Fixed: Various stability, functionality, and security fixes

  • Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686)

    • CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
    • CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation
    • CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

  • Fixed Firefox tab crash in FIPS mode (bsc#1174284).

Record
SUSE-SU-2020:14489-1
Updated
2026-11-02
OSVSUSE-SU-2020:2544-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.2.0 ESR

    • Fixed: Various stability, functionality, and security fixes

  • Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686)

    • CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
    • CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation
    • CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

  • Fixed Firefox tab crash in FIPS mode (bsc#1174284).

  • Fix broken translation-loading. (bsc#1173991)

    • allow addon sideloading
    • mark signatures for langpacks non-mandatory
    • do not autodisable user profile scopes

  • Google API key is not usable for geolocation service any more

Record
SUSE-SU-2020:2544-1
Updated
2026-11-02
OSVSUSE-SU-2020:2552-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

  • Mozilla Thunderbird was updated to 68.12 (bsc#1175686)

  • CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege

  • CVE-2020-15664: Attacker-induced prompt for extension installation

  • CVE-2020-15669: Use-After-Free when aborting an operation

Record
SUSE-SU-2020:2552-1
Updated
2026-11-02
OSVSUSE-SU-2020:2563-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox Extended Support Release 78.2.0 ESR

    • Fixed: Various stability, functionality, and security fixes

  • Mozilla Firefox ESR 78.2 MFSA 2020-38 (bsc#1175686)

    • CVE-2020-15663 (bmo#1643199) Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
    • CVE-2020-15664 (bmo#1658214) Attacker-induced prompt for extension installation
    • CVE-2020-15670 (bmo#1651001, bmo#1651449, bmo#1653626, bmo#1656957) Memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

  • Fixed Firefox tab crash in FIPS mode (bsc#1174284).

  • Fix broken translation-loading (bsc#1173991)

    • allow addon sideloading
    • mark signatures for langpacks non-mandatory
    • do not autodisable user profile scopes

  • Google API key is not usable for geolocation service any more

Record
SUSE-SU-2020:2563-1
Updated
2026-11-02
OSVSUSE-SU-2020:2749-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

  • Firefox was updated to 78.3.0 ESR (bsc#1176756, MFSA 2020-43)

    • CVE-2020-15677: Download origin spoofing via redirect
    • CVE-2020-15676: Fixed an XSS when pasting attacker-controlled data into a contenteditable element
    • CVE-2020-15678: When recursing through layers while scrolling, an iterator may have become invalid, resulting in a potential use-after-free scenario
    • CVE-2020-15673: Fixed memory safety bugs

  • Enhance fix for wayland-detection (bsc#1174420)

  • Attempt to fix langpack-parallelization by introducing separate obj-dirs for each lang (bsc#1173986, bsc#1167976)

  • Firefox was updated to 78.2.0 ESR (bsc#1175686, MFSA 2020-38)

    • CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
    • CVE-2020-15664: Attacker-induced prompt for extension installation
    • CVE-2020-15670: Fixed memory safety bugs fixed in Firefox 80 and Firefox ESR 78.2

  • Fixed Firefox tab crash in FIPS mode (bsc#1174284).

  • Fixed broken translation-loading (bsc#1173991)

    • allow addon sideloading
    • mark signatures for langpacks non-mandatory
    • do not autodisable user profile scopes

  • Google API key is not usable for geolocation service any more

Record
SUSE-SU-2020:2749-1
Updated
2026-11-02
OSVUSN-4474-1 No score

firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, trick the user in to installing a malicious extension, spoof the URL bar, leak sensitive information between origins, or execute arbitrary code. (CVE-2020-15664, CVE-2020-15665, CVE-2020-15666, CVE-2020-15670)

It was discovered that NSS incorrectly handled certain signatures. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-12400, CVE-2020-12401, CVE-2020-6829)

A data race was discovered when importing certificate information in to the trust store. An attacker could potentially exploit this to cause an unspecified impact. (CVE-2020-15668)

Record
USN-4474-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox
Alpine:v3.12
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.13
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.14
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.15
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.16
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.17
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.18
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.19
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.20
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.21
 78.0 up to 80.0-r0
80.0-r0
Show 119 moreShow less
Affected packages
PackageAffectedFixed
firefox
Alpine:v3.22
 78.0 up to 80.0-r0
80.0-r0
firefox
Alpine:v3.23
 78.0 up to 80.0-r0
80.0-r0
firefox-esr
Alpine:v3.12
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.13
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.14
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.15
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.16
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.17
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.18
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.19
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.20
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.21
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.22
 before 78.2.0-r0
78.2.0-r0
firefox-esr
Alpine:v3.23
 before 78.2.0-r0
78.2.0-r0
librewolf
Alpine:v3.21
 before 80.0-r0
80.0-r0
librewolf
Alpine:v3.22
 before 80.0-r0
80.0-r0
librewolf
Alpine:v3.23
 before 80.0-r0
80.0-r0
librewolf
Alpine:v3.24
 before 80.0-r0
80.0-r0
firefox-esr
Debian:12
 before 68.12.0esr-1
68.12.0esr-1
firefox-esr
Debian:13
 before 68.12.0esr-1
68.12.0esr-1
firefox-esr
Debian:14
 before 68.12.0esr-1
68.12.0esr-1
thunderbird
Debian:12
 before 1:68.12.0-1
1:68.12.0-1
thunderbird
Debian:13
 before 1:68.12.0-1
1:68.12.0-1
thunderbird
Debian:14
 before 1:68.12.0-1
1:68.12.0-1
firefox-esr
Debian:9
From an advisory covering 2 CVEs
 before 68.12.0esr-1~deb9u1, plus listed versions
45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1
Show 45 moreShow less
52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1
68.12.0esr-1~deb9u1
thunderbird
Debian:9
From an advisory covering 2 CVEs
 before 1:68.12.0-1~deb9u1, plus listed versions
1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1
Show 45 moreShow less
1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1
1:68.12.0-1~deb9u1
firefox-esr
Debian:10
From an advisory covering 2 CVEs
 before 68.12.0esr-1~deb10u1, plus listed versions
60.7.2esr-160.8.0esr-160.8.0esr-1~deb10u160.8.0esr-1~deb8u160.8.0esr-1~deb9u1
Show 45 moreShow less
60.9.0esr-1~deb10u160.9.0esr-1~deb8u160.9.0esr-1~deb8u260.9.0esr-1~deb9u168.0.2esr-168.1.0esr-168.10.0esr-168.10.0esr-1~deb10u168.10.0esr-1~deb9u168.11.0esr-168.11.0esr-1~deb10u168.11.0esr-1~deb9u168.12.0esr-1~deb9u168.2.0esr-168.2.0esr-1~deb10u168.2.0esr-1~deb8u168.2.0esr-1~deb9u168.2.0esr-1~deb9u268.3.0esr-168.3.0esr-1~deb10u168.3.0esr-1~deb8u168.3.0esr-1~deb9u168.4.0esr-168.4.0esr-1~deb10u168.4.0esr-1~deb8u168.4.0esr-1~deb9u168.4.1esr-168.4.1esr-1~deb10u168.4.1esr-1~deb8u168.4.1esr-1~deb9u168.4.2esr-168.5.0esr-168.5.0esr-1~deb10u168.5.0esr-1~deb8u168.5.0esr-1~deb9u168.6.0esr-168.6.0esr-1~deb10u168.6.0esr-1~deb8u168.6.0esr-1~deb9u168.6.1esr-168.6.1esr-1~deb10u168.6.1esr-1~deb9u168.7.0esr-168.7.0esr-1~deb10u168.7.0esr-1~deb8u1
68.12.0esr-1~deb10u1
thunderbird
Debian:10
From an advisory covering 2 CVEs
 before 1:68.12.0-1~deb10u1, plus listed versions
1:60.7.2-11:60.8.0-11:60.8.0-1~deb10u11:60.8.0-1~deb8u11:60.8.0-1~deb9u1
Show 45 moreShow less
1:60.8.0-21:60.9.0-11:60.9.0-1~deb10u11:60.9.0-1~deb8u11:60.9.0-1~deb9u11:65.0~b1-11:66.0~b1-11:67.0~b3-11:68.0~b1-11:68.1.1-1~exp11:68.1.2-1~exp11:68.10.0-11:68.10.0-1~deb10u11:68.10.0-1~deb9u11:68.11.0-11:68.11.0-1~deb10u11:68.11.0-1~deb9u11:68.11.0-21:68.11.0-31:68.12.0-1~deb9u11:68.12.0-1~deb9u21:68.2.1-11:68.2.2-11:68.2.2-1~deb10u11:68.2.2-1~deb8u11:68.2.2-1~deb9u11:68.3.0-11:68.3.0-21:68.3.0-2~deb10u11:68.3.0-2~deb8u11:68.3.0-2~deb9u11:68.3.1-11:68.4.1-11:68.4.1-1~deb10u11:68.4.1-1~deb8u11:68.4.1-1~deb9u11:68.4.2-11:68.5.0-11:68.5.0-1~deb10u11:68.5.0-1~deb8u11:68.5.0-1~deb9u11:68.6.0-11:68.6.0-1~deb10u11:68.6.0-1~deb8u11:68.6.0-1~deb9u1
1:68.12.0-1~deb10u1
nspr
Mageia:7
From an advisory covering 2 CVEs
 before 4.28-1.mga7
4.28-1.mga7
firefox
Mageia:7
From an advisory covering 2 CVEs
 before 68.12.0-2.mga7
68.12.0-2.mga7
firefox-l10n
Mageia:7
From an advisory covering 2 CVEs
 before 68.12.0-1.mga7
68.12.0-1.mga7
thunderbird
Mageia:7
From an advisory covering 2 CVEs
 before 68.12.0-1.mga7
68.12.0-1.mga7
thunderbird-l10n
Mageia:7
From an advisory covering 2 CVEs
 before 68.12.0-1.mga7
68.12.0-1.mga7
firefox
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 10 CVEs
 before 0:78.2.0-3.el8_0
0:78.2.0-3.el8_0
firefox-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 10 CVEs
 before 0:78.2.0-3.el8_0
0:78.2.0-3.el8_0
firefox-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 10 CVEs
 before 0:78.2.0-3.el8_0
0:78.2.0-3.el8_0
firefox
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
firefox-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
firefox
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
firefox-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
firefox
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
firefox-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 11 CVEs
 before 0:78.2.0-2.el8_2
0:78.2.0-2.el8_2
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 11 CVEs
 before 0:78.2.0-2.el8_2
0:78.2.0-2.el8_2
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 11 CVEs
 before 0:78.2.0-2.el8_2
0:78.2.0-2.el8_2
firefox
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::computenode
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
firefox
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 10 CVEs
 before 0:78.2.0-3.el8_1
0:78.2.0-3.el8_1
firefox-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 10 CVEs
 before 0:78.2.0-3.el8_1
0:78.2.0-3.el8_1
firefox-debugsource
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 10 CVEs
 before 0:78.2.0-3.el8_1
0:78.2.0-3.el8_1
thunderbird
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
thunderbird-debuginfo
Red Hat:enterprise_linux:7::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
thunderbird
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
thunderbird-debuginfo
Red Hat:enterprise_linux:7::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
thunderbird
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
thunderbird-debuginfo
Red Hat:enterprise_linux:7::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el7_8
0:68.12.0-1.el7_8
thunderbird
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_1
0:68.12.0-1.el8_1
thunderbird-debuginfo
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_1
0:68.12.0-1.el8_1
thunderbird-debugsource
Red Hat:rhel_eus:8.1::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_1
0:68.12.0-1.el8_1
thunderbird
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_0
0:68.12.0-1.el8_0
thunderbird-debuginfo
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_0
0:68.12.0-1.el8_0
thunderbird-debugsource
Red Hat:rhel_e4s:8.0::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_0
0:68.12.0-1.el8_0
thunderbird
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_2
0:68.12.0-1.el8_2
thunderbird-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_2
0:68.12.0-1.el8_2
thunderbird-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el8_2
0:68.12.0-1.el8_2
thunderbird
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::client
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
thunderbird
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::server
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
thunderbird
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
thunderbird-debuginfo
Red Hat:enterprise_linux:6::workstation
From an advisory covering 2 CVEs
 before 0:68.12.0-1.el6_10
0:68.12.0-1.el6_10
MozillaFirefox
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 3 CVEs
 before 78.2.0-78.90.2
78.2.0-78.90.2
MozillaFirefox
SUSE:HPE Helion OpenStack 8
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:OpenStack Cloud 7
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:OpenStack Cloud 8
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:OpenStack Cloud 9
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4-LTSS
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaFirefox
SUSE:Enterprise Storage 5
From an advisory covering 3 CVEs
 before 78.2.0-112.19.2
78.2.0-112.19.2
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 3 CVEs
 before 68.12.0-3.94.1
68.12.0-3.94.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP2
From an advisory covering 3 CVEs
 before 68.12.0-3.94.1
68.12.0-3.94.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 3 CVEs
 before 78.2.0-3.105.1
78.2.0-3.105.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP2
From an advisory covering 7 CVEs
 before 78.3.0-8.6.1
78.3.0-8.6.1
firefox
Ubuntu:16.04:LTS
 before 80.0+build2-0ubuntu0.16.04.1, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 45 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.160.0.2+build1-0ubuntu0.16.04.161.0+build3-0ubuntu0.16.04.261.0.1+build1-0ubuntu0.16.04.162.0+build2-0ubuntu0.16.04.362.0+build2-0ubuntu0.16.04.462.0+build2-0ubuntu0.16.04.5
80.0+build2-0ubuntu0.16.04.1
firefox
Ubuntu:18.04:LTS
 before 80.0+build2-0ubuntu0.18.04.1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1
Show 45 moreShow less
60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1
80.0+build2-0ubuntu0.18.04.1
thunderbird
Ubuntu:18.04:LTS
 before 1:78.8.1+build1-0ubuntu0.18.04.1, plus listed versions
1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1
Show 15 moreShow less
1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.11:60.7.0+build1-0ubuntu0.18.04.11:60.7.1+build1-0ubuntu0.18.04.11:60.7.2+build2-0ubuntu0.18.04.11:60.8.0+build1-0ubuntu0.18.04.11:60.9.0+build1-0ubuntu0.18.04.11:68.2.1+build1-0ubuntu0.18.04.11:68.2.2+build1-0ubuntu0.18.04.11:68.4.1+build1-0ubuntu0.18.04.11:68.7.0+build1-0ubuntu0.18.04.11:68.8.0+build2-0ubuntu0.18.04.21:68.10.0+build1-0ubuntu0.18.04.1
1:78.8.1+build1-0ubuntu0.18.04.1
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
firefox
Ubuntu:20.04:LTS
 before 80.0+build2-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 18 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.1
80.0+build2-0ubuntu0.20.04.1
thunderbird
Ubuntu:20.04:LTS
 before 1:78.7.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 9 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.1
1:78.7.1+build1-0ubuntu0.20.04.1
mozjs68
Ubuntu:20.04:LTS
 All versions, plus listed versions
68.5.0-1~fakesync68.5.0-2~fakesync68.6.0-168.6.0-1ubuntu1
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
firefox
Ubuntu:16.04:LTS
From an advisory covering 8 CVEs
 before 80.0+build2-0ubuntu0.16.04.1, plus listed versions
41.0.2+build2-0ubuntu142.0+build2-0ubuntu144.0+build3-0ubuntu244.0.1+build1-0ubuntu144.0.2+build1-0ubuntu1
Show 45 moreShow less
45.0+build2-0ubuntu145.0.1+build1-0ubuntu145.0.2+build1-0ubuntu146.0+build5-0ubuntu0.16.04.246.0.1+build1-0ubuntu0.16.04.247.0+build3-0ubuntu0.16.04.148.0+build2-0ubuntu0.16.04.149.0+build4-0ubuntu0.16.04.149.0.2+build2-0ubuntu0.16.04.250.0+build2-0ubuntu0.16.04.250.0.2+build1-0ubuntu0.16.04.150.1.0+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.151.0.1+build2-0ubuntu0.16.04.252.0+build2-0ubuntu0.16.04.152.0.1+build2-0ubuntu0.16.04.152.0.2+build1-0ubuntu0.16.04.153.0+build6-0ubuntu0.16.04.153.0.2+build1-0ubuntu0.16.04.253.0.3+build1-0ubuntu0.16.04.254.0+build3-0ubuntu0.16.04.155.0.1+build2-0ubuntu0.16.04.255.0.2+build1-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.156.0+build6-0ubuntu0.16.04.257.0+build4-0ubuntu0.16.04.557.0+build4-0ubuntu0.16.04.657.0.1+build2-0ubuntu0.16.04.157.0.3+build1-0ubuntu0.16.04.157.0.4+build1-0ubuntu0.16.04.158.0+build6-0ubuntu0.16.04.158.0.1+build1-0ubuntu0.16.04.158.0.2+build1-0ubuntu0.16.04.159.0+build5-0ubuntu0.16.04.159.0.1+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.159.0.2+build1-0ubuntu0.16.04.360.0+build2-0ubuntu0.16.04.160.0.1+build2-0ubuntu0.16.04.160.0.2+build1-0ubuntu0.16.04.161.0+build3-0ubuntu0.16.04.261.0.1+build1-0ubuntu0.16.04.162.0+build2-0ubuntu0.16.04.362.0+build2-0ubuntu0.16.04.462.0+build2-0ubuntu0.16.04.5
80.0+build2-0ubuntu0.16.04.1
firefox
Ubuntu:18.04:LTS
From an advisory covering 8 CVEs
 before 80.0+build2-0ubuntu0.18.04.1, plus listed versions
56.0+build6-0ubuntu157.0.1+build2-0ubuntu159.0.1+build1-0ubuntu159.0.2+build1-0ubuntu160.0+build2-0ubuntu1
Show 45 moreShow less
60.0.1+build2-0ubuntu0.18.04.160.0.2+build1-0ubuntu0.18.04.161.0+build3-0ubuntu0.18.04.161.0.1+build1-0ubuntu0.18.04.162.0+build2-0ubuntu0.18.04.362.0+build2-0ubuntu0.18.04.462.0+build2-0ubuntu0.18.04.562.0.3+build1-0ubuntu0.18.04.163.0+build2-0ubuntu0.18.04.263.0.3+build1-0ubuntu0.18.04.164.0+build3-0ubuntu0.18.04.165.0+build2-0ubuntu0.18.04.165.0.1+build2-0ubuntu0.18.04.166.0+build3-0ubuntu0.18.04.166.0.1+build1-0ubuntu0.18.04.166.0.2+build1-0ubuntu0.18.04.166.0.3+build1-0ubuntu0.18.04.166.0.4+build3-0ubuntu0.18.04.166.0.5+build1-0ubuntu0.18.04.167.0+build2-0ubuntu0.18.04.167.0.1+build1-0ubuntu0.18.04.167.0.2+build2-0ubuntu0.18.04.167.0.3+build1-0ubuntu0.18.04.167.0.4+build1-0ubuntu0.18.04.168.0+build3-0ubuntu0.18.04.168.0.1+build1-0ubuntu0.18.04.168.0.2+build1-0ubuntu0.18.04.169.0+build2-0ubuntu0.18.04.169.0.1+build1-0ubuntu0.18.04.169.0.2+build1-0ubuntu0.18.04.170.0+build2-0ubuntu0.18.04.170.0.1+build1-0ubuntu0.18.04.171.0+build5-0ubuntu0.18.04.172.0.1+build1-0ubuntu0.18.04.172.0.2+build1-0ubuntu0.18.04.173.0+build3-0ubuntu0.18.04.173.0.1+build1-0ubuntu0.18.04.174.0+build3-0ubuntu0.18.04.174.0.1+build1-0ubuntu0.18.04.175.0+build3-0ubuntu0.18.04.176.0+build2-0ubuntu0.18.04.176.0.1+build1-0ubuntu0.18.04.177.0.1+build1-0ubuntu0.18.04.178.0.1+build1-0ubuntu0.18.04.178.0.2+build2-0ubuntu0.18.04.1
80.0+build2-0ubuntu0.18.04.1
firefox
Ubuntu:20.04:LTS
From an advisory covering 8 CVEs
 before 80.0+build2-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 18 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.1
80.0+build2-0ubuntu0.20.04.1
MozillaThunderbird
openSUSE:Leap 15.1
From an advisory covering 3 CVEs
 before 68.12.0-lp151.2.50.1
68.12.0-lp151.2.50.1
MozillaFirefox
openSUSE:Leap 15.1
From an advisory covering 3 CVEs
 before 78.2.0-lp151.2.65.1
78.2.0-lp151.2.65.1
MozillaFirefox
openSUSE:Leap 15.2
From an advisory covering 3 CVEs
 before 78.2.0-lp152.2.18.1
78.2.0-lp152.2.18.1
MozillaThunderbird
openSUSE:Leap 15.2
From an advisory covering 3 CVEs
 before 68.12.0-lp152.2.10.1
68.12.0-lp152.2.10.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 661 CVEs
 before 92.0-1.2
92.0-1.2
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 394 CVEs
 before 91.1.1-1.1
91.1.1-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-15664 is a medium vulnerability (CVSS 6.5) in Mozilla Firefox, published August 26, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.39%, the 72nd percentile. Fixed in firefox 80.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 313 versions and 1,864 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open