CVE-2020-15669

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified

published October 1, 2020

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified. This results in a use-after-free and we presume that with enough effort it could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 68.12 and Thunderbird < 68.12.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01119 · 65.9th percentile
Published
2020-10-01T18:42Z
EPSS history
Timeline
  • 01 OCT 18:42Z
    When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be notified
    cvelistv5