CVE-2020-15669
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
CVE-2020-15669- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
CVE-2020-15669- Updated
- 2026-11-02
EUVDEUVD-2020-7656 No score
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
EUVD-2020-7656- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8vqh-gxqj-vj4q No score
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the...
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
GHSA-8vqh-gxqj-vj4q- Updated
- 2026-11-02
OSV
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
CVE-2020-15669- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-15669
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
DEBIAN-CVE-2020-15669- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
Show 17 moreShow less
OSVRHSA-2020:3555
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3555- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3556
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3556- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3557
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3557- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3558
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3558- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3559
Red Hat Security Advisory: firefox security update
- Record
RHSA-2020:3559- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3631
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2020:3631- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3632
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2020:3632- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3633
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2020:3633- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3634
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2020:3634- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2020:3643
Red Hat Security Advisory: thunderbird security update
- Record
RHSA-2020:3643- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-15669
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.
- Record
UBUNTU-CVE-2020-15669- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVMGASA-2020-0348 No score
Updated firefox packages fix security vulnerabilities
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code (CVE-2020-15669).
- Record
MGASA-2020-0348- Updated
- 2026-11-02
OSVMGASA-2020-0352 No score
Updated thunderbird packages fix security vulnerabilities
By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed (CVE-2020-15664).
When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code (CVE-2020-15669).
- Record
MGASA-2020-0352- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1383-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
-
Mozilla Thunderbird was updated to 68.12 (bsc#1175686)
-
CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
-
CVE-2020-15664: Attacker-induced prompt for extension installation
-
CVE-2020-15669: Use-After-Free when aborting an operation
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1383-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2020:1392-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
-
Mozilla Thunderbird was updated to 68.12 (bsc#1175686)
-
CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
-
CVE-2020-15664: Attacker-induced prompt for extension installation
-
CVE-2020-15669: Use-After-Free when aborting an operation
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:1392-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score
MozillaThunderbird-91.1.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10601-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:2552-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues:
-
Mozilla Thunderbird was updated to 68.12 (bsc#1175686)
-
CVE-2020-15663: Downgrade attack on the Mozilla Maintenance Service could have resulted in escalation of privilege
-
CVE-2020-15664: Attacker-induced prompt for extension installation
-
CVE-2020-15669: Use-After-Free when aborting an operation
- Record
SUSE-SU-2020:2552-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
firefox-esrDebian:12 |
before 68.12.0esr-1 | 68.12.0esr-1 |
firefox-esrDebian:13 |
before 68.12.0esr-1 | 68.12.0esr-1 |
firefox-esrDebian:14 |
before 68.12.0esr-1 | 68.12.0esr-1 |
thunderbirdDebian:12 |
before 1:68.12.0-1 | 1:68.12.0-1 |
thunderbirdDebian:13 |
before 1:68.12.0-1 | 1:68.12.0-1 |
thunderbirdDebian:14 |
before 1:68.12.0-1 | 1:68.12.0-1 |
firefox-esrDebian:9 From an advisory covering 2 CVEs |
before 68.12.0esr-1~deb9u1, plus listed versions 45.9.0esr-152.0.1esr-152.0.2esr-152.0esr-152.1.0esr-1 Show 45 moreShow less52.2.0esr-152.2.0esr-1~deb7u152.2.0esr-1~deb8u152.2.0esr-1~deb9u152.2.0esr-252.3.0esr-152.3.0esr-1~deb7u152.3.0esr-1~deb8u152.3.0esr-1~deb8u252.3.0esr-1~deb9u152.3.0esr-252.4.0esr-1~deb8u152.4.0esr-1~deb9u152.4.0esr-252.4.0esr-2~deb7u152.5.0esr-152.5.0esr-1~deb7u152.5.0esr-1~deb8u152.5.0esr-1~deb9u152.5.2esr-152.5.2esr-1~deb7u152.5.2esr-1~deb8u152.5.2esr-1~deb9u152.5.3esr-152.6.0esr-152.6.0esr-1~deb7u152.6.0esr-1~deb8u152.6.0esr-1~deb9u152.6.0esr-252.6.0esr-2+alpha.152.6.0esr-2+alpha.252.7.0esr-152.7.0esr-1~deb8u152.7.0esr-1~deb9u152.7.1esr-152.7.1esr-1~deb7u152.7.1esr-1~deb8u152.7.1esr-1~deb9u152.7.2esr-152.7.2esr-1~deb7u152.7.2esr-1~deb8u152.7.2esr-1~deb9u152.7.3esr-152.7.3esr-1~deb7u152.7.3esr-1~deb8u1 |
68.12.0esr-1~deb9u1 |
thunderbirdDebian:9 From an advisory covering 2 CVEs |
before 1:68.12.0-1~deb9u1, plus listed versions 1.5-41.5.0.2-11.5.0.2-21.5.0.2-31.5.0.4-1 Show 45 moreShow less1.5.0.4-21.5.0.4-31.5.0.5-11.5.0.7-11.5.0.7-21:52.4.0-11:52.4.0-1~deb7u11:52.4.0-1~deb8u11:52.4.0-1~deb9u11:52.4.0-2~exp11:52.5.0-11:52.5.0-1~deb7u11:52.5.0-1~deb8u11:52.5.0-1~deb9u11:52.5.2-11:52.5.2-1~deb7u11:52.5.2-21:52.5.2-2~deb8u11:52.5.2-2~deb9u11:52.6.0-11:52.6.0-1+alpha.11:52.6.0-1+alpha.21:52.6.0-1~deb7u11:52.6.0-1~deb8u11:52.6.0-1~deb9u11:52.7.0-11:52.7.0-1~deb7u11:52.7.0-1~deb8u11:52.7.0-1~deb9u11:52.8.0-11:52.8.0-1~deb7u11:52.8.0-1~deb8u11:52.8.0-1~deb9u11:52.9.0-11:52.9.1-11:52.9.1-1~deb8u11:52.9.1-1~deb9u11:58.0~b3-11:60.0-11:60.0-21:60.0-2~deb9u11:60.0-31:60.0-3~deb9u11:60.0~b10-11:60.0~b2-1 |
1:68.12.0-1~deb9u1 |
firefox-esrDebian:10 From an advisory covering 2 CVEs |
before 68.12.0esr-1~deb10u1, plus listed versions 60.7.2esr-160.8.0esr-160.8.0esr-1~deb10u160.8.0esr-1~deb8u160.8.0esr-1~deb9u1 Show 45 moreShow less60.9.0esr-1~deb10u160.9.0esr-1~deb8u160.9.0esr-1~deb8u260.9.0esr-1~deb9u168.0.2esr-168.1.0esr-168.10.0esr-168.10.0esr-1~deb10u168.10.0esr-1~deb9u168.11.0esr-168.11.0esr-1~deb10u168.11.0esr-1~deb9u168.12.0esr-1~deb9u168.2.0esr-168.2.0esr-1~deb10u168.2.0esr-1~deb8u168.2.0esr-1~deb9u168.2.0esr-1~deb9u268.3.0esr-168.3.0esr-1~deb10u168.3.0esr-1~deb8u168.3.0esr-1~deb9u168.4.0esr-168.4.0esr-1~deb10u168.4.0esr-1~deb8u168.4.0esr-1~deb9u168.4.1esr-168.4.1esr-1~deb10u168.4.1esr-1~deb8u168.4.1esr-1~deb9u168.4.2esr-168.5.0esr-168.5.0esr-1~deb10u168.5.0esr-1~deb8u168.5.0esr-1~deb9u168.6.0esr-168.6.0esr-1~deb10u168.6.0esr-1~deb8u168.6.0esr-1~deb9u168.6.1esr-168.6.1esr-1~deb10u168.6.1esr-1~deb9u168.7.0esr-168.7.0esr-1~deb10u168.7.0esr-1~deb8u1 |
68.12.0esr-1~deb10u1 |
thunderbirdDebian:10 From an advisory covering 2 CVEs |
before 1:68.12.0-1~deb10u1, plus listed versions 1:60.7.2-11:60.8.0-11:60.8.0-1~deb10u11:60.8.0-1~deb8u11:60.8.0-1~deb9u1 Show 45 moreShow less1:60.8.0-21:60.9.0-11:60.9.0-1~deb10u11:60.9.0-1~deb8u11:60.9.0-1~deb9u11:65.0~b1-11:66.0~b1-11:67.0~b3-11:68.0~b1-11:68.1.1-1~exp11:68.1.2-1~exp11:68.10.0-11:68.10.0-1~deb10u11:68.10.0-1~deb9u11:68.11.0-11:68.11.0-1~deb10u11:68.11.0-1~deb9u11:68.11.0-21:68.11.0-31:68.12.0-1~deb9u11:68.12.0-1~deb9u21:68.2.1-11:68.2.2-11:68.2.2-1~deb10u11:68.2.2-1~deb8u11:68.2.2-1~deb9u11:68.3.0-11:68.3.0-21:68.3.0-2~deb10u11:68.3.0-2~deb8u11:68.3.0-2~deb9u11:68.3.1-11:68.4.1-11:68.4.1-1~deb10u11:68.4.1-1~deb8u11:68.4.1-1~deb9u11:68.4.2-11:68.5.0-11:68.5.0-1~deb10u11:68.5.0-1~deb8u11:68.5.0-1~deb9u11:68.6.0-11:68.6.0-1~deb10u11:68.6.0-1~deb8u11:68.6.0-1~deb9u1 |
1:68.12.0-1~deb10u1 |
Show 55 moreShow less
| Package | Affected | Fixed |
|---|---|---|
nsprMageia:7 From an advisory covering 2 CVEs |
before 4.28-1.mga7 | 4.28-1.mga7 |
firefoxMageia:7 From an advisory covering 2 CVEs |
before 68.12.0-2.mga7 | 68.12.0-2.mga7 |
firefox-l10nMageia:7 From an advisory covering 2 CVEs |
before 68.12.0-1.mga7 | 68.12.0-1.mga7 |
thunderbirdMageia:7 From an advisory covering 2 CVEs |
before 68.12.0-1.mga7 | 68.12.0-1.mga7 |
thunderbird-l10nMageia:7 From an advisory covering 2 CVEs |
before 68.12.0-1.mga7 | 68.12.0-1.mga7 |
firefoxRed Hat:rhel_e4s:8.0::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_0 | 0:78.2.0-3.el8_0 |
firefox-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_0 | 0:78.2.0-3.el8_0 |
firefox-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_0 | 0:78.2.0-3.el8_0 |
firefoxRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
firefox-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
firefoxRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
firefox-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
firefoxRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
firefox-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
firefoxRed Hat:enterprise_linux:8::appstream From an advisory covering 11 CVEs |
before 0:78.2.0-2.el8_2 | 0:78.2.0-2.el8_2 |
firefox-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 11 CVEs |
before 0:78.2.0-2.el8_2 | 0:78.2.0-2.el8_2 |
firefox-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 11 CVEs |
before 0:78.2.0-2.el8_2 | 0:78.2.0-2.el8_2 |
firefoxRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefox-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefoxRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefox-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefoxRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefox-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefoxRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefox-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
firefoxRed Hat:rhel_eus:8.1::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_1 | 0:78.2.0-3.el8_1 |
firefox-debuginfoRed Hat:rhel_eus:8.1::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_1 | 0:78.2.0-3.el8_1 |
firefox-debugsourceRed Hat:rhel_eus:8.1::appstream From an advisory covering 10 CVEs |
before 0:78.2.0-3.el8_1 | 0:78.2.0-3.el8_1 |
thunderbirdRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:7::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
thunderbirdRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:7::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
thunderbirdRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
thunderbird-debuginfoRed Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el7_8 | 0:68.12.0-1.el7_8 |
thunderbirdRed Hat:rhel_eus:8.1::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_1 | 0:68.12.0-1.el8_1 |
thunderbird-debuginfoRed Hat:rhel_eus:8.1::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_1 | 0:68.12.0-1.el8_1 |
thunderbird-debugsourceRed Hat:rhel_eus:8.1::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_1 | 0:68.12.0-1.el8_1 |
thunderbirdRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_0 | 0:68.12.0-1.el8_0 |
thunderbird-debuginfoRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_0 | 0:68.12.0-1.el8_0 |
thunderbird-debugsourceRed Hat:rhel_e4s:8.0::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_0 | 0:68.12.0-1.el8_0 |
thunderbirdRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_2 | 0:68.12.0-1.el8_2 |
thunderbird-debuginfoRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_2 | 0:68.12.0-1.el8_2 |
thunderbird-debugsourceRed Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs |
before 0:68.12.0-1.el8_2 | 0:68.12.0-1.el8_2 |
thunderbirdRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
thunderbirdRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
thunderbirdRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
thunderbird-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 2 CVEs |
before 0:68.12.0-1.el6_10 | 0:68.12.0-1.el6_10 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP1 From an advisory covering 3 CVEs |
before 68.12.0-3.94.1 | 68.12.0-3.94.1 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP2 From an advisory covering 3 CVEs |
before 68.12.0-3.94.1 | 68.12.0-3.94.1 |
thunderbirdUbuntu:18.04:LTS |
before 1:78.8.1+build1-0ubuntu0.18.04.1, plus listed versions 1:52.4.0+build1-0ubuntu21:52.6.0+build1-0ubuntu11:52.7.0+build1-0ubuntu11:52.8.0+build1-0ubuntu0.18.04.11:52.9.1+build3-0ubuntu0.18.04.1 Show 15 moreShow less1:60.2.1+build1-0ubuntu0.18.04.21:60.4.0+build2-0ubuntu0.18.04.11:60.5.1+build2-0ubuntu0.18.04.11:60.6.1+build2-0ubuntu0.18.04.11:60.7.0+build1-0ubuntu0.18.04.11:60.7.1+build1-0ubuntu0.18.04.11:60.7.2+build2-0ubuntu0.18.04.11:60.8.0+build1-0ubuntu0.18.04.11:60.9.0+build1-0ubuntu0.18.04.11:68.2.1+build1-0ubuntu0.18.04.11:68.2.2+build1-0ubuntu0.18.04.11:68.4.1+build1-0ubuntu0.18.04.11:68.7.0+build1-0ubuntu0.18.04.11:68.8.0+build2-0ubuntu0.18.04.21:68.10.0+build1-0ubuntu0.18.04.1 |
1:78.8.1+build1-0ubuntu0.18.04.1 |
MozillaThunderbirdopenSUSE:Leap 15.1 From an advisory covering 3 CVEs |
before 68.12.0-lp151.2.50.1 | 68.12.0-lp151.2.50.1 |
MozillaThunderbirdopenSUSE:Leap 15.2 From an advisory covering 3 CVEs |
before 68.12.0-lp152.2.10.1 | 68.12.0-lp152.2.10.1 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 394 CVEs |
before 91.1.1-1.1 | 91.1.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-15669 is a high vulnerability (CVSS 8.8) in Mozilla Firefox Esr, published August 26, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.12%, the 66th percentile. Fixed in firefox-esr 68.12.0esr-1.
References
mozilla.org/security/advisories/mfsa2020-40
bugzilla.mozilla.org/show_bug.cgi?id=1656957
nvd.nist.gov/vuln/detail/CVE-2020-15669
github.com/advisories/GHSA-8vqh-gxqj-vj4q
security-tracker.debian.org/tracker/CVE-2020-15669
Show 194 moreShow less
advisories.mageia.org/MGASA-2020-0348.html
bugs.mageia.org/show_bug.cgi?id=27193
groups.google.com/g/mozilla.dev.tech.nspr/c/YLamaq1rVco
thunderbird.net/en-US/thunderbird/68.12.0/releasenotes
access.redhat.com/errata/RHSA-2020:3555
bugzilla.redhat.com/show_bug.cgi?id=1861645
security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3555.json
cve.org/CVERecord?id=CVE-2020-12422
suse.com/support/update/announcement/2020/suse-su-20202552-1
bugzilla.suse.com/1175686
ubuntu.com/security/CVE-2020-15669
rhn.redhat.com/errata/RHSA-2020-3558.html
lists.opensuse.org/archives/list/[email protected]/thread/5U3575B4DNDI75CVTXVASA5NIEHF6Z5T
Left out here: 235 versions and 282 references. The JSON record has them.