CVE-2020-26965

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password

published December 9, 2020

CVSS
—
EPSS
1%
Percentile
69.4
In the wild
Unconfirmed
What it is

Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password. If, when using a software keyboard that remembers user input, a user typed their password and used that feature, the type of the password field was changed, resulting in a keyboard layout change and the possibility for the software keyboard to remember the typed password. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01262 · 69.4th percentile
Published
2020-12-09T00:24Z
EPSS history
Timeline
  • 09 DEC 00:24Z
    Some websites have a feature "Show Password" where clicking a button will change a password field into a textbook field, revealing the typed password
    cvelistv5