CVE-2020-35112

If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension (such as .bat or .exe) that executable would have been launched instead. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.

• https://bugzilla.mozilla.org/show_bug.cgi?id=1661365Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2020-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-55/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-56/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1661365Permissions Required
• https://www.mozilla.org/security/advisories/mfsa2020-54/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-55/Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-56/Vendor Advisory

Published

Jan 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-3509A vulnerability in the DHCP message handler of Cisco IOS XE …8.6
• CVE-2020-35090Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-3510A vulnerability in the Umbrella Connector component of Cisco…8.6
• CVE-2020-3511A vulnerability in the ISDN subsystem of Cisco IOS Software …7.4
• CVE-2020-35110Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-35111When an extension with the proxy permission registered to re…4.3
• CVE-2020-35113Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2020-35114Mozilla developers reported memory safety bugs present in Fi…8.8
• CVE-2020-3512A vulnerability in the PROFINET handler for Link Layer Disco…7.4
• CVE-2020-35121An issue was discovered in the Keysight Database Connector p…8.8
• CVE-2020-35122An issue was discovered in the Keysight Database Connector p…7.5
• CVE-2020-35123In Zimbra Collaboration Suite Network Edition versions < 9.0…6.5