CVE-2020-12423

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have…

published July 9, 2020

CVSS
—
EPSS
0%
Percentile
34.7
In the wild
Unconfirmed
What it is

When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have loaded the DLL, leading to arbitrary code execution. *Note: This issue only affects the Windows operating system; other operating systems are unaffected.* This vulnerability affects Firefox < 78.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00414 · 34.7th percentile
Published
2020-07-09T14:39Z
EPSS history
Timeline
  • 09 JUL 14:39Z
    When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, Firefox may have…
    cvelistv5