Mozilla · Firefox and Thunderbird
CVE-2020-6820
Mozilla Firefox And Thunderbird Use-After-Free Vulnerability
공격에 악용됨
높음 8.1 공격 가능성: 7.1%
무엇인가
Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
CISA: Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.
Mozilla의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2022. 5. 23. | Type Confusion | Firefox and Thunderbird | 높음 8.8 | 38% |
| 2022. 5. 23. | Sandbox Escape | Firefox and Thunderbird | 치명적 10.0 | 56% |
| 2022. 3. 28. | Denial-of-Service | Firefox and Thunderbird | 높음 8.8 | 69% |
| 2021. 11. 3. | Use-After-Free | Firefox and Thunderbird | 높음 8.1 | 3.0% |
| 2021. 11. 3. | Type Confusion | Firefox and Thunderbird | 높음 8.8 | 46% |
| 2025. 10. 6. | Remote Code Execution | Multiple Products | 치명적 9.8 | 83% |
| 2024. 10. 15. | Use-After-Free | Firefox | 치명적 9.8 | 23% |
| 2023. 6. 22. | Use-After-Free | Firefox, Firefox ESR, and Thunderbird | 높음 7.5 | 87% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.