CVE-2020-26963

—

CVSS 3.1

4.3 medium

EPSS

<1%p56

Published

Dec 9, 2020 (Dec 9, 2020)

Modified

Jun 17, 2026

Description

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox < 83.

Vendors: mozilla
Products: firefox
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.