CVE-2020-26950

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition

published December 9, 2020

CVSS
—
EPSS
42%
Percentile
98.7
In the wild
Unconfirmed
What it is

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.42327 · 98.7th percentile
Published
2020-12-09T00:19Z
EPSS history
Timeline
  • 09 DEC 00:19Z
    In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition
    cvelistv5