by Kastro
Paper/Archive/CVE-2020-6815

CVE-2020-6815

Mozilla Firefox — Mozilla developers reported memory safety and script safety bugs present in Firefox 73.

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 71.7.717 × 2014.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Mozilla developers reported memory safety and script safety bugs present in Firefox 73. Some of these bugs showed evidence of memory corruption or escalation of privilege and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 74.

Affected

ProductAffectedFixed inSource
Firefoxunspecified – < 7474CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refmozilla.org/security/advisories/mfsa2020-08refbugzilla.mozilla.org/buglist.cgi?bug_id=1181957%2C1557732%2C1557739%2C1611457%2C1612431