CVE-2020-15656

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.5%

exploitation probability

1.5%top 27% of all CVEs

observed exploitation

nono source reports it

JIT optimizations involving the Javascript arguments object could confuse later optimizations. This risk was already mitigated by various precautions in the code, resulting in this bug rated at only moderate severity. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

Affected products

Mozilla · Firefox Mozilla · Firefox ESR Mozilla · Thunderbird

References

http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00025.html https://bugzilla.mozilla.org/show_bug.cgi?id=1647293 https://usn.ubuntu.com/4443-1/https://www.mozilla.org/security/advisories/mfsa2020-30/https://www.mozilla.org/security/advisories/mfsa2020-32/https://www.mozilla.org/security/advisories/mfsa2020-33/