CVE-2020-15673: Use After Free
Mozilla developer Jason Kratzer reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Other sources
Mozilla developer Jason Kratzer reported memory safety bugs present in Thunderbird 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code.
Mozilla developers reported memory safety bugs present in Firefox 80 and Firefox ESR 78.2. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 81, Thunderbird < 78.3, and Firefox ESR < 78.3.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2020-15673?
CVE-2020-15673 has a high severity level due to the potential for memory corruption leading to arbitrary code execution.
How do I fix CVE-2020-15673?
To fix CVE-2020-15673, update to the latest version of Mozilla Firefox, Firefox ESR, or Thunderbird as specified in the remediation instructions.
Which versions of Firefox are affected by CVE-2020-15673?
CVE-2020-15673 affects Firefox versions prior to 81.
What platforms are impacted by CVE-2020-15673?
CVE-2020-15673 impacts various platforms using affected versions of Firefox, Firefox ESR, and Thunderbird.
Is CVE-2020-15673 being actively exploited?
There is no public information confirming that CVE-2020-15673 is being actively exploited, but it is recommended to apply patches to mitigate risks.