{"id":"CVE-2020-15671","aliases":["EUVD-2020-7658","GHSA-r6xw-ww9g-m6wg"],"status":"published","title":"When typing in a password under certain conditions, a race may have occured where the...","description":"When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android \u003c 80.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00492,"percentile":0.42548,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-20","CWE-200","CWE-362"],"published":"2020-10-01T18:41:30Z","modified":"2026-08-19T15:32:56Z","products":[{"vendor":"mozilla","product":"firefox for android"},{"vendor":"mozilla","product":"firefox_mobile"}],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2020-39/","tags":["x_refsource_MISC","x_transferred","Release Notes","Vendor Advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1653862","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Permissions Required","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15671"},{"url":"https://www.mozilla.org/security/advisories/mfsa2020-39"},{"url":"https://github.com/advisories/GHSA-r6xw-ww9g-m6wg"}],"sources":{"cve":[{"id":"CVE-2020-15671","description":"When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android \u003c 80.","status":"published","published":"2020-10-01T18:41:30Z","modified":"2024-08-04T13:22:30.805Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7658","description":"When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android \u003c 80.","status":"published","published":"2020-10-01T18:41:30Z","modified":"2024-08-04T13:22:30Z","updated_at":"2026-11-03T03:07:30.980066Z"}],"ghsa":[{"id":"GHSA-r6xw-ww9g-m6wg","title":"When typing in a password under certain conditions, a race may have occured where the...","description":"When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android \u003c 80.","status":"published","published":"2022-05-24T17:29:54Z","modified":"2026-08-19T15:32:56Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-20","CWE-200"],"updated_at":"2026-11-02T15:10:39.892418Z"}],"nvd":[{"id":"CVE-2020-15671","description":"When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android \u003c 80.","status":"published","published":"2020-10-01T19:15:13.533Z","modified":"2026-08-19T15:29:21.807Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.6,"vector":"AV:N/AC:H/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200","CWE-362"],"updated_at":"2026-11-02T14:06:17.70091Z"}]}}