CVE-2020-6810

After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74.

• CWE-290

• https://bugzilla.mozilla.org/show_bug.cgi?id=1432856Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-08/Vendor Advisory
• https://bugzilla.mozilla.org/show_bug.cgi?id=1432856Issue Tracking, Vendor Advisory
• https://www.mozilla.org/security/advisories/mfsa2020-08/Vendor Advisory

Published

Mar 25, 2020

Last Modified

Jun 17, 2026

Status

Modified

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-6804A reflected XSS vulnerability exists within the gateway, all…6.1
• CVE-2020-6805When removing data about an origin whose tab was recently cl…8.8
• CVE-2020-6806By carefully crafting promise resolutions, it was possible t…8.8
• CVE-2020-6807When a device was changed while a stream was about to be des…8.8
• CVE-2020-6808When a JavaScript URL (javascript:) is evaluated and the res…6.5
• CVE-2020-6809When a Web Extension had the all-urls permission and made a …7.5
• CVE-2020-6811The 'Copy as cURL' feature of Devtools' network tab did not …8.8
• CVE-2020-6812The first time AirPods are connected to an iPhone, they beco…5.3
• CVE-2020-6813When protecting CSS blocks with the nonce feature of Content…5.3
• CVE-2020-6814Mozilla developers reported memory safety bugs present in Fi…9.8
• CVE-2020-6815Mozilla developers reported memory safety and script safety …9.8
• CVE-2020-6816In Mozilla Bleach before 3.12, a mutation XSS in bleach.clea…6.1