CVE-2020-15657

Firefox could be made to load attacker-supplied DLL files from the installation directory

published August 10, 2020

CVSS
—
EPSS
0%
Percentile
27.7
In the wild
Unconfirmed
What it is

Firefox could be made to load attacker-supplied DLL files from the installation directory. This required an attacker that is already capable of placing files in the installation directory. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00353 · 27.7th percentile
Published
2020-08-10T17:43Z
EPSS history
Timeline
  • 10 AUG 17:43Z
    Firefox could be made to load attacker-supplied DLL files from the installation directory
    cvelistv5