CVE-2020-15654

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are…

published August 10, 2020

CVSS
—
EPSS
1%
Percentile
72.7
In the wild
Unconfirmed
What it is

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01423 · 72.7th percentile
Published
2020-08-10T17:43Z
EPSS history
Timeline
  • 10 AUG 17:43Z
    When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are…
    cvelistv5