CVE-2020-37190CWE-120

Top Password Firefox Password Recovery 2.8 - Denial of Service

Medium · published February 11, 2026

CVSS v4.0
4.6
EPSS
0%
Percentile
24.7
In the wild
Unconfirmed
What it is

Top Password Firefox Password Recovery 2.8 contains a denial of service vulnerability that allows attackers to crash the application by overflowing input fields. Attackers can trigger the vulnerability by inserting 5000 characters into the User Name or Registration Code input fields.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
EPSS
0.00328 · 24.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-02-11T20:37Z
EPSS history
Timeline
  • 11 FEB 20:37Z
    Top Password Firefox Password Recovery 2.8 - Denial of Service
    cvelistv5