CVE-2020-26973

Reference Links

• https://bugzilla.mozilla.org/show_bug.cgi?id=1680084
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-54/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-55/
• https://www.mozilla.org/en-US/security/advisories/mfsa2020-56/
• https://www.mozilla.org/security/advisories/mfsa2020-54/
• https://www.mozilla.org/security/advisories/mfsa2020-55/
• https://www.mozilla.org/security/advisories/mfsa2020-56/

Parent vulnerabilities

(Appears in the following advisories)

• MFSA2020-56
• MFSA2020-54
• MFSA2020-55

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2020-16042
• CVE-2020-26971
• CVE-2020-26973
• CVE-2020-26974
• CVE-2020-26978
• CVE-2020-35111
• CVE-2020-35112
• CVE-2020-35113
• CVE-2020-26972
• CVE-2020-26975
• CVE-2020-26976
• CVE-2020-26977
• CVE-2020-26979
• CVE-2020-35114

Frequently Asked Questions

• What is the severity of CVE-2020-26973?

  The severity of CVE-2020-26973 is categorized as moderate.

• How do I fix CVE-2020-26973?

  To fix CVE-2020-26973, update to Mozilla Firefox version 85 or later.

• Which versions of Mozilla software are affected by CVE-2020-26973?

  CVE-2020-26973 affects Mozilla Firefox versions prior to 85, Firefox ESR versions prior to 78.6, and Thunderbird versions prior to 78.6.

• Can CVE-2020-26973 be exploited remotely?

  Yes, CVE-2020-26973 can potentially be exploited remotely through crafted input.

• What is the nature of the vulnerability in CVE-2020-26973?

  CVE-2020-26973 is a sanitizer bypass vulnerability that confuses the CSS Sanitizer, leading to incorrect components being removed.