vulnerability

Gentoo Linux: CVE-2020-26956: Mozilla Firefox: Multiple vulnerabilities

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
4	(AV:N/AC:M/Au:N/C:N/I:P/A:N)	Dec 7, 2020	Dec 7, 2020	Mar 31, 2026

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Dec 7, 2020

Added

Dec 7, 2020

Modified

Mar 31, 2026

Description

In some cases, removing HTML elements during sanitization would keep existing SVG event handlers and therefore lead to XSS. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

Solutions

gentoo-linux-upgrade-mail-client-thunderbirdgentoo-linux-upgrade-mail-client-thunderbird-bingentoo-linux-upgrade-www-client-firefoxgentoo-linux-upgrade-www-client-firefox-bin

References

CVE-2020-26956
https://attackerkb.com/topics/CVE-2020-26956
CWE-79
EUVD-EUVD-2020-19480
GENTOO-202012-03
GENTOO-202012-04
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-19480

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today