CVE-2020-12407

Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content. This vulnerability affects Firefox < 77.

• CWE-125

• https://bugzilla.mozilla.org/show_bug.cgi?id=1637112Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-20/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1637112Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-20/Vendor Advisory

Published

Jul 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12401During ECDSA signature generation, padding applied in the no…4.7
• CVE-2020-12402During RSA key generation, bignum implementations used a var…4.4
• CVE-2020-12403A flaw was found in the way CHACHA20-POLY1305 was implemente…9.1
• CVE-2020-12404For native-to-JS bridging the app requires a unique token to…4.3
• CVE-2020-12405When browsing a malicious page, a race condition in our Shar…5.3
• CVE-2020-12406Mozilla Developer Iain Ireland discovered a missing type che…8.8
• CVE-2020-12408When browsing a document hosted on an IP address, an attacke…6.5
• CVE-2020-12409When using certain blank characters in a URL, they where inc…8.8
• CVE-2020-1241A security feature bypass vulnerability exists when Windows …7.8
• CVE-2020-12410Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2020-12411Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2020-12412By navigating a tab using the history API, an attacker could…4.3