CVE-2020-12389

CVSS v3.1 10 (Critical)

CVSS v2.0 7.5 (High)

EPSS 0.48 % (76^th)

Affected Products 3

Advisories 7

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR < 68.8 and Firefox < 76.

Weaknesses

CWE-20: Improper Input Validation

CVE Status: PUBLISHED
CNA: Mozilla Corporation
Published Date: 2020-05-26 18:15:11
(4 years ago)
Updated Date: 2020-05-27 17:54:52
(4 years ago)

Affected Products

Microsoft

Windows

Mozilla

Firefox
Firefox Esr

Configuration #1

AND

		CPE23	Up To
OR
	Mozilla Firefox prior 76.0 version	cpe:2.3:a:mozilla:firefox	< 76.0
OR
	Running on/with
	Mozilla Firefox Esr prior 68.8.0 version	cpe:2.3:a:mozilla:firefox_esr	< 68.8.0
OR
	Running on/with
	Microsoft Windows	cpe:2.3:o:microsoft:windows:-