CVE-2020-12426

Mozilla developers and community members reported memory safety bugs present in Firefox 77. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 78.

• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.htmlMailing List, Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1608068%2C1609951%2C1631187%2C1637682Exploit, Issue Tracking, Patch, Vendor Advisory
• https://security.gentoo.org/glsa/202007-10Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-24/Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.htmlMailing List, Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1608068%2C1609951%2C1631187%2C1637682Exploit, Issue Tracking, Patch, Vendor Advisory
• https://security.gentoo.org/glsa/202007-10Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-24/Vendor Advisory

Published

Jul 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-12420When trying to connect to a STUN server, a race condition co…8.8
• CVE-2020-12421When performing add-on updates, certificate chains terminati…6.5
• CVE-2020-12422In non-standard configurations, a JPEG image created by Java…8.8
• CVE-2020-12423When the Windows DLL "webauthn.dll" was missing from the Ope…7.8
• CVE-2020-12424When constructing a permission prompt for WebRTC, a URI was …6.5
• CVE-2020-12425Due to confusion processing a hyphen character in Date.parse…6.5
• CVE-2020-12427The Western Digital WD Discovery application before 3.8.229 …8.8
• CVE-2020-12429Online Course Registration 2.0 has multiple SQL injections t…9.8
• CVE-2020-1243<p>A denial of service vulnerability exists when Microsoft H…7.8
• CVE-2020-12430An issue was discovered in qemuDomainGetStatsIOThread in qem…6.5
• CVE-2020-12431A Windows privilege change issue was discovered in Splashtop…6.6
• CVE-2020-12432The WOPI API integration for Vereign Collabora CODE through …6.1