CVE-2020-12418

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript

published July 9, 2020

CVSS
—
EPSS
3%
Percentile
87.4
In the wild
Unconfirmed
What it is

Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03034 · 87.4th percentile
Published
2020-07-09T14:19Z
EPSS history
Timeline
  • 09 JUL 14:19Z
    Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript
    cvelistv5