CVE-2020-26959: Use After Free

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1669466
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-51/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-50/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-52/
• https://www.mozilla.org/security/advisories/mfsa2020-50/
• https://www.mozilla.org/security/advisories/mfsa2020-51/
• https://www.mozilla.org/security/advisories/mfsa2020-52/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-51
• MFSA2020-52
• MFSA2020-50

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-26951
• CVE-2020-16012
• CVE-2020-26953
• CVE-2020-26956
• CVE-2020-26958
• CVE-2020-26959
• CVE-2020-26960
• CVE-2020-15999
• CVE-2020-26961
• CVE-2020-26965
• CVE-2020-26966
• CVE-2020-26968
• CVE-2020-26952
• CVE-2020-26954
• CVE-2020-26955
• CVE-2020-26957
• CVE-2020-26962
• CVE-2020-26963
• CVE-2020-26964
• CVE-2020-26967
• CVE-2020-26969

Frequently Asked Questions

• What is the severity of CVE-2020-26959?

  The severity of CVE-2020-26959 is high with a severity value of 8.8.

• Which software is affected by CVE-2020-26959?

  Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5 are affected by CVE-2020-26959.

• How can the use-after-free vulnerability be exploited?

  The use-after-free vulnerability in CVE-2020-26959 can potentially be exploited to cause a memory corruption and crash.

• How can I fix CVE-2020-26959?

  To fix CVE-2020-26959, update Mozilla Firefox to version 83 or later, Firefox ESR to version 78.5 or later, or Thunderbird to version 78.5 or later.

• Where can I find more information about CVE-2020-26959?

  You can find more information about CVE-2020-26959 in the following references: [Reference 1](https://bugzilla.mozilla.org/show_bug.cgi?id=1669466), [Reference 2](https://www.mozilla.org/en-US/security/advisories/mfsa2020-51/), [Reference 3](https://www.mozilla.org/security/advisories/mfsa2020-50/).