CVE-2020-26953
First published: Tue Nov 17 2020(Updated: )
It was possible to cause the browser to enter fullscreen mode without displaying the security UI; thus making it possible to attempt a phishing attack or otherwise confuse the user.
Credit: security@mozilla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Mozilla Firefox ESR | <78.5 | 78.5 |
| <83 | 83 | |
| <78.5 | 78.5 | |
| <78.5 | 78.5 | |
| Mozilla Firefox | <83.0 | |
| Mozilla Firefox ESR | <78.5 | |
| Mozilla Thunderbird | <78.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://bugzilla.mozilla.org/show_bug.cgi?id=1656741
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-51/
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/
- https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/
- https://www.mozilla.org/security/advisories/mfsa2020-50/
- https://www.mozilla.org/security/advisories/mfsa2020-51/
- https://www.mozilla.org/security/advisories/mfsa2020-52/
Peer vulnerabilities
(Found alongside the following vulnerabilities)
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-26953.
What is the severity of CVE-2020-26953?
CVE-2020-26953 has a severity level of medium (4).
Which software versions are affected by CVE-2020-26953?
The affected software versions are Mozilla Firefox ESR up to version 78.5, Mozilla Firefox up to version 83, and Mozilla Thunderbird up to version 78.5.
What is the description of CVE-2020-26953?
CVE-2020-26953 allows attackers to cause the browser to enter fullscreen mode without displaying the security UI, potentially leading to phishing attacks or user confusion.
How can I fix CVE-2020-26953?
To fix CVE-2020-26953, ensure you update your Mozilla Firefox ESR to version 78.5, Mozilla Firefox to version 83, or Mozilla Thunderbird to version 78.5.
- collector/mozilla-advisory
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/references
- agent/author
- agent/severity
- agent/weakness
- source/Mozilla
- agent/software-canonical-lookup
- agent/event
- agent/software-canonical-lookup-request
- agent/description
- agent/tags
- collector/nvd-index
- collector/mitre-cve
- source/MITRE
- vendor/mozilla
- canonical/mozilla firefox esr
- canonical/mozilla thunderbird
- canonical/mozilla firefox