November 2020 Patch Tuesday: Microsoft fixes actively exploited Windows Kernel flaw
60
CVE-2020-26950
PoC ×2—CVSS 3.1
8.8 high
EPSS
42%p99
Published
()
Modified
Description
In certain circumstances, the MCallGetProperty opcode can be emitted with unmet assumptions resulting in an exploitable use-after-free condition. This vulnerability affects Firefox < 82.0.3, Firefox ESR < 78.4.1, and Thunderbird < 78.4.2.
- Vendors
- mozilla
- Products
- firefox, firefox esr, thunderbird
- Weakness
- CWE-416
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
In the news2 stories
60