CVE-2020-15683

Mozilla developers and community members reported memory safety bugs present in Firefox 81 and Firefox ESR 78.3. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.4, Firefox < 82, and Thunderbird < 78.4.

• CWE-416
• CWE-787

• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00057.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00062.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.htmlMailing List, Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1576843%2C1656987%2C1660954%2C1662760%2C1663439%2C1666140Broken Link, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00027.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202010-08Third Party Advisory
• https://www.debian.org/security/2020/dsa-4780Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-45/Release Notes, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-46/Release Notes, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-47/Release Notes, Vendor Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00057.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00062.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00074.htmlMailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00077.htmlMailing List, Third Party Advisory
• https://bugzilla.mozilla.org/buglist.cgi?bug_id=1576843%2C1656987%2C1660954%2C1662760%2C1663439%2C1666140Broken Link, Issue Tracking, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00027.htmlMailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202010-08Third Party Advisory
• https://www.debian.org/security/2020/dsa-4780Third Party Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-45/Release Notes, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-46/Release Notes, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-47/Release Notes, Vendor Advisory

Published

Oct 22, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-15678When recursing through graphical layers while scrolling, an …8.8
• CVE-2020-15679An OAuth session fixation vulnerability existed in the VPN l…7.6
• CVE-2020-1568A remote code execution vulnerability exists when Microsoft …7.5
• CVE-2020-15680If a valid external protocol handler was referenced in an im…5.3
• CVE-2020-15681When multiple WASM threads had a reference to a module, and …7.5
• CVE-2020-15682When a link to an external protocol was clicked, a prompt wa…6.5
• CVE-2020-15684Mozilla developers reported memory safety bugs present in Fi…9.8
• CVE-2020-15685During the plaintext phase of the STARTTLS connection setup,…8.8
• CVE-2020-15687Missing access control restrictions in the Hypervisor compon…7.5
• CVE-2020-15688The HTTP Digest Authentication in the GoAhead web server bef…8.8
• CVE-2020-15689Appweb before 7.2.2 and 8.x before 8.1.0, when built with CG…7.5
• CVE-2020-1569A remote code execution vulnerability exists when Microsoft …7.8