Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2020-26950Use After Free in Mozilla Firefox

CWE-416Use After Free12 documents10 sources
Severity
8.8HIGHNVD
EPSS
48.3%
top 2.26%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedDec 9
Latest updateMay 24

Description

In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages7 packages

CVEListV5mozilla/firefox< 82.0.3
NVDmozilla/firefox< 82.0.3
CVEListV5mozilla/firefox_esr< 78.4.1
NVDmozilla/firefox_esr< 78.4.1
CVEListV5mozilla/thunderbird< 78.4.2

🔴Vulnerability Details

3
GHSA
GHSA-cp22-2989-32j9: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition2022-05-24
CVEList
CVE-2020-26950: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition2020-12-09
OSV
CVE-2020-26950: In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition2020-12-09

💥Exploits & PoCs

1
Metasploit
Firefox MCallGetProperty Write Side Effects Use After Free Exploit

📋Vendor Advisories

5
Ubuntu
Thunderbird vulnerabilities2020-11-25
Ubuntu
Firefox vulnerability2020-11-10
Red Hat
Mozilla: Write side effects in MCallGetProperty opcode not accounted for2020-11-09
Debian
CVE-2020-26950: firefox - In certain circumstances, the MCallGetProperty opcode can be emitted with unmet ...2020
Mozilla
Mozilla Foundation Security Advisory 2020-49: CVE-2020-26950

🕵️Threat Intelligence

2
Sentinelone
Firefox JIT Use-After-Frees | Exploiting CVE-2020-269502022-02-03
Sentinelone
Firefox JIT Use-After-Frees | Exploiting CVE-2020-269502022-02-03
CVE-2020-26950 — Use After Free in Mozilla Firefox | cvebase