CVE-2020-26954

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1657026
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/
• https://www.mozilla.org/security/advisories/mfsa2020-50/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-50

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-26951
• CVE-2020-26952
• CVE-2020-16012
• CVE-2020-26953
• CVE-2020-26954
• CVE-2020-26955
• CVE-2020-26956
• CVE-2020-26957
• CVE-2020-26958
• CVE-2020-26959
• CVE-2020-26960
• CVE-2020-15999
• CVE-2020-26961
• CVE-2020-26962
• CVE-2020-26963
• CVE-2020-26964
• CVE-2020-26965
• CVE-2020-26966
• CVE-2020-26967
• CVE-2020-26968
• CVE-2020-26969

Frequently Asked Questions

• What is CVE-2020-26954?

  CVE-2020-26954 is a vulnerability in Firefox for Android that allowed accepting manifests from arbitrary file paths and declaring webapp manifests for other origins.

• What is the severity of CVE-2020-26954?

  The severity of CVE-2020-26954 is medium.

• How does CVE-2020-26954 impact Firefox for Android?

  CVE-2020-26954 allows UI spoofing and can lead to cross-origin attacks on targeted users.

• How can I fix CVE-2020-26954 in Firefox for Android?

  To fix CVE-2020-26954, update Firefox for Android to version 83 or higher.

• Where can I find more information about CVE-2020-26954?

  You can find more information about CVE-2020-26954 in the references provided: [Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1657026) and [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/).