CVE-2020-15664

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

• CWE-863

• https://bugzilla.mozilla.org/show_bug.cgi?id=1658214Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-37/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-38/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-39/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-40/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-41/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1658214Issue Tracking, Permissions Required, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-36/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-37/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-38/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-39/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-40/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-41/Vendor Advisory

Published

Oct 1, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15659Mozilla developers and community members reported memory saf…8.8
• CVE-2020-1566An elevation of privilege vulnerability exists when the Wind…4.2
• CVE-2020-15660Missing checks on Content-Type headers in geckodriver before…8.8
• CVE-2020-15661A rogue webpage could override the injected WKUserScript use…6.5
• CVE-2020-15662A rogue webpage could override the injected WKUserScript use…6.5
• CVE-2020-15663If Firefox is installed to a user-writable directory, the Mo…8.8
• CVE-2020-15665Firefox did not reset the address bar after the beforeunload…4.3
• CVE-2020-15666When trying to load a non-video in an audio/video context th…6.5
• CVE-2020-15667When processing a MAR update file, after the signature has b…8.8
• CVE-2020-15668A lock was missing when accessing a data structure and impor…4.3
• CVE-2020-15669When aborting an operation, such as a fetch, an abort signal…8.8
• CVE-2020-1567A remote code execution vulnerability exists in the way that…4.2