[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2020-12420":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-05T20:55:33.689Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":36,"aliases":46,"duplicate_of":9,"upstream":47,"downstream":48,"duplicates":107,"related":108,"reserved_at":9,"published_at":122,"modified_at":123,"state":124,"summary":125,"references_raw":133,"kevs":187,"epss":188,"epss_history":191,"metrics":463,"affected":474},"CVE-2020-12420","When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR \u003C 68.10, Firefox \u003C 78, and Thunderbird \u003C 68.10.0.",null,[11,28],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],{"_key":29,"id":29,"name":30,"description":31,"type":15,"status":32,"abstraction":33,"likelihood_of_exploit":34,"capec":35},"CWE-416","Use After Free","The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory \"belongs\" to the code that operates on the new pointer.","Stable","Variant","High",[],[37],{"_key":38,"name":39,"source":40,"url":41,"maturity":42,"reliability_score":43,"verified":44,"type":9,"platforms":45,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_8C0BBF4724CCDE9A","Exploit Reference (bugzilla.mozilla.org)","reference","https://bugzilla.mozilla.org/show_bug.cgi?id=1643437","unknown",0.2,false,[],[],[],[49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105],{"_key":50},"RHSA-2020:2824",{"_key":52},"RHSA-2020:2825",{"_key":54},"RHSA-2020:2826",{"_key":56},"RHSA-2020:2827",{"_key":58},"RHSA-2020:2828",{"_key":60},"RHSA-2020:2906",{"_key":62},"RHSA-2020:2907",{"_key":64},"RHSA-2020:2966",{"_key":66},"RHSA-2020:3038",{"_key":68},"RHSA-2020:3046",{"_key":70},"OPENSUSE-SU-2024:10601-1",{"_key":72},"SUSE-SU-2020:14421-1",{"_key":74},"SUSE-SU-2020:1898-1",{"_key":76},"SUSE-SU-2020:1899-1",{"_key":78},"SUSE-SU-2020:1900-1",{"_key":80},"OPENSUSE-SU-2020:0967-1",{"_key":82},"OPENSUSE-SU-2020:0982-1",{"_key":84},"OPENSUSE-SU-2020:0983-1",{"_key":86},"OPENSUSE-SU-2020:1017-1",{"_key":88},"OPENSUSE-SU-2024:10600-1",{"_key":90},"OPENSUSE-SU-2024:14572-1",{"_key":92},"DSA-4713-1",{"_key":94},"DSA-4718-1",{"_key":96},"MGASA-2020-0274",{"_key":98},"MGASA-2020-0300",{"_key":100},"UBUNTU-CVE-2020-12420",{"_key":102},"USN-4408-1",{"_key":104},"USN-4421-1",{"_key":106},"DEBIAN-CVE-2020-12420",[],[109,110,111,112,113,114,115,116,117,118,119,120,121],{"_key":70},{"_key":72},{"_key":74},{"_key":76},{"_key":78},{"_key":80},{"_key":82},{"_key":84},{"_key":86},{"_key":88},{"_key":90},{"_key":96},{"_key":98},"2020-07-09T14:39:37.000Z","2024-08-04T11:56:51.667Z","Modified",{"cisa_kev":44,"cisa_ransomware":44,"cisa_vendor":9,"epss_severity":126,"epss_score":127,"severity":128,"severity_score":129,"severity_version":130,"severity_source":131,"severity_vector":132,"severity_status":124},"low",0.00321,"high",9.3,"v2.0","nvd","AV:N/AC:M/Au:N/C:C/I:C/A:C",[134,141,145,149,154,161,165,169,173,178,183],{"url":135,"sources":136,"tags":138},"https://www.mozilla.org/security/advisories/mfsa2020-24/",[137,131],"cve.org",[139,140],"X Refsource MISC","Vendor Advisory",{"url":142,"sources":143,"tags":144},"https://www.mozilla.org/security/advisories/mfsa2020-26/",[137,131],[139,140],{"url":146,"sources":147,"tags":148},"https://www.mozilla.org/security/advisories/mfsa2020-25/",[137,131],[139,140],{"url":41,"sources":150,"tags":151},[137,131],[139,152,153,140],"Exploit","Issue Tracking",{"url":155,"sources":156,"tags":157},"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00023.html",[137,131],[140,158,159,160],"X Refsource SUSE","Mailing List","Third Party Advisory",{"url":162,"sources":163,"tags":164},"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00026.html",[137,131],[140,158,159,160],{"url":166,"sources":167,"tags":168},"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00027.html",[137,131],[140,158,159,160],{"url":170,"sources":171,"tags":172},"http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00049.html",[137,131],[140,158,159,160],{"url":174,"sources":175,"tags":176},"https://usn.ubuntu.com/4421-1/",[137,131],[140,177,160],"X Refsource UBUNTU",{"url":179,"sources":180,"tags":181},"https://security.gentoo.org/glsa/202007-09",[137,131],[140,182,160],"X Refsource GENTOO",{"url":184,"sources":185,"tags":186},"https://security.gentoo.org/glsa/202007-10",[137,131],[140,182,160],[],{"date":189,"score":127,"percentile":190},"2026-06-05",0.55422,[192,196,199,202,205,208,210,213,216,219,222,225,228,231,234,238,241,244,247,251,254,257,260,263,266,269,272,275,278,281,284,287,290,293,296,298,301,304,307,310,314,317,320,323,326,329,332,335,338,341,344,347,350,353,357,360,363,366,368,371,374,378,381,384,387,390,393,396,399,402,405,407,410,413,416,419,422,425,428,431,434,437,440,443,445,448,451,454,457,460],{"date":193,"score":194,"percentile":195},"2025-11-04",0.00633,0.69534,{"date":197,"score":194,"percentile":198},"2025-11-05",0.69522,{"date":200,"score":194,"percentile":201},"2025-11-06",0.69519,{"date":203,"score":194,"percentile":204},"2025-11-07",0.69531,{"date":206,"score":194,"percentile":207},"2025-11-08",0.69532,{"date":209,"score":194,"percentile":198},"2025-11-09",{"date":211,"score":194,"percentile":212},"2025-11-10",0.69512,{"date":214,"score":194,"percentile":215},"2025-11-11",0.69521,{"date":217,"score":194,"percentile":218},"2025-11-12",0.69545,{"date":220,"score":194,"percentile":221},"2025-11-13",0.69552,{"date":223,"score":194,"percentile":224},"2025-11-14",0.69559,{"date":226,"score":194,"percentile":227},"2025-11-15",0.69555,{"date":229,"score":194,"percentile":230},"2025-11-16",0.69551,{"date":232,"score":194,"percentile":233},"2025-11-17",0.69548,{"date":235,"score":236,"percentile":237},"2025-11-18",0.00496,0.63134,{"date":239,"score":236,"percentile":240},"2025-11-19",0.63147,{"date":242,"score":236,"percentile":243},"2025-11-20",0.63128,{"date":245,"score":194,"percentile":246},"2025-11-21",0.69566,{"date":248,"score":249,"percentile":250},"2025-11-22",0.00565,0.67571,{"date":252,"score":249,"percentile":253},"2025-11-23",0.67561,{"date":255,"score":249,"percentile":256},"2025-11-24",0.67549,{"date":258,"score":249,"percentile":259},"2025-11-25",0.67558,{"date":261,"score":249,"percentile":262},"2025-11-26",0.67565,{"date":264,"score":249,"percentile":265},"2025-11-27",0.67567,{"date":267,"score":249,"percentile":268},"2025-11-28",0.67553,{"date":270,"score":249,"percentile":271},"2025-11-29",0.67534,{"date":273,"score":249,"percentile":274},"2025-11-30",0.67532,{"date":276,"score":249,"percentile":277},"2025-12-01",0.67689,{"date":279,"score":249,"percentile":280},"2025-12-02",0.67696,{"date":282,"score":249,"percentile":283},"2025-12-03",0.67694,{"date":285,"score":249,"percentile":286},"2025-12-04",0.67525,{"date":288,"score":249,"percentile":289},"2025-12-05",0.67539,{"date":291,"score":249,"percentile":292},"2025-12-06",0.67544,{"date":294,"score":249,"percentile":295},"2025-12-07",0.6754,{"date":297,"score":249,"percentile":292},"2025-12-08",{"date":299,"score":249,"percentile":300},"2025-12-09",0.67575,{"date":302,"score":249,"percentile":303},"2025-12-10",0.67622,{"date":305,"score":249,"percentile":306},"2025-12-11",0.67641,{"date":308,"score":249,"percentile":309},"2025-12-12",0.67667,{"date":311,"score":312,"percentile":313},"2025-12-13",0.00416,0.61076,{"date":315,"score":312,"percentile":316},"2025-12-14",0.61075,{"date":318,"score":312,"percentile":319},"2025-12-15",0.61051,{"date":321,"score":312,"percentile":322},"2025-12-16",0.61072,{"date":324,"score":312,"percentile":325},"2025-12-17",0.6109,{"date":327,"score":312,"percentile":328},"2025-12-18",0.61129,{"date":330,"score":312,"percentile":331},"2025-12-19",0.61138,{"date":333,"score":312,"percentile":334},"2025-12-20",0.6114,{"date":336,"score":312,"percentile":337},"2025-12-21",0.61127,{"date":339,"score":312,"percentile":340},"2025-12-22",0.61117,{"date":342,"score":312,"percentile":343},"2025-12-23",0.61133,{"date":345,"score":312,"percentile":346},"2025-12-24",0.61143,{"date":348,"score":312,"percentile":349},"2025-12-25",0.61177,{"date":351,"score":312,"percentile":352},"2025-12-26",0.61173,{"date":354,"score":355,"percentile":356},"2025-12-27",0.00594,0.68665,{"date":358,"score":312,"percentile":359},"2025-12-28",0.61149,{"date":361,"score":312,"percentile":362},"2025-12-29",0.61141,{"date":364,"score":312,"percentile":365},"2025-12-30",0.61155,{"date":367,"score":312,"percentile":349},"2025-12-31",{"date":369,"score":312,"percentile":370},"2026-01-01",0.61361,{"date":372,"score":312,"percentile":373},"2026-01-02",0.61348,{"date":375,"score":376,"percentile":377},"2026-01-03",0.00467,0.63957,{"date":379,"score":376,"percentile":380},"2026-01-04",0.63779,{"date":382,"score":376,"percentile":383},"2026-01-05",0.63772,{"date":385,"score":376,"percentile":386},"2026-01-06",0.63768,{"date":388,"score":376,"percentile":389},"2026-01-07",0.63789,{"date":391,"score":376,"percentile":392},"2026-01-08",0.63811,{"date":394,"score":376,"percentile":395},"2026-01-09",0.63812,{"date":397,"score":376,"percentile":398},"2026-01-10",0.6381,{"date":400,"score":376,"percentile":401},"2026-01-11",0.638,{"date":403,"score":376,"percentile":404},"2026-01-12",0.63781,{"date":406,"score":376,"percentile":404},"2026-01-13",{"date":408,"score":376,"percentile":409},"2026-01-14",0.6382,{"date":411,"score":376,"percentile":412},"2026-01-15",0.63836,{"date":414,"score":376,"percentile":415},"2026-01-16",0.63855,{"date":417,"score":376,"percentile":418},"2026-01-17",0.63844,{"date":420,"score":376,"percentile":421},"2026-01-18",0.63837,{"date":423,"score":376,"percentile":424},"2026-01-19",0.63825,{"date":426,"score":376,"percentile":427},"2026-01-20",0.6384,{"date":429,"score":376,"percentile":430},"2026-01-21",0.63842,{"date":432,"score":376,"percentile":433},"2026-01-22",0.63849,{"date":435,"score":376,"percentile":436},"2026-01-23",0.6388,{"date":438,"score":376,"percentile":439},"2026-01-24",0.63884,{"date":441,"score":376,"percentile":442},"2026-01-25",0.6385,{"date":444,"score":376,"percentile":421},"2026-01-26",{"date":446,"score":376,"percentile":447},"2026-01-27",0.63847,{"date":449,"score":376,"percentile":450},"2026-01-28",0.63856,{"date":452,"score":376,"percentile":453},"2026-01-29",0.63857,{"date":455,"score":376,"percentile":456},"2026-01-30",0.63864,{"date":458,"score":376,"percentile":459},"2026-01-31",0.63869,{"date":461,"score":376,"percentile":462},"2026-02-01",0.64013,[464],{"source":131,"cvss_v2_0":465,"cvss_v3_0":9,"cvss_v3_1":468,"cvss_v4_0":9},{"baseScore":129,"baseSeverity":9,"vectorString":132,"impactScore":466,"exploitabilityScore":467},10,8.6,{"baseScore":469,"baseSeverity":470,"vectorString":471,"impactScore":472,"exploitabilityScore":473},8.8,"HIGH","CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",9.8,7.2,[475,490,503,515,522],{"ecosystem":9,"name":476,"vendor":477,"product":478,"cpe_part":479,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":480},"ubuntu linux","canonical","ubuntu_linux","o",[481,484,486,488],{"version":482,"is_range":44,"range_type":483,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"16.04","cpe",{"version":485,"is_range":44,"range_type":483,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"18.04",{"version":487,"is_range":44,"range_type":483,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"19.10",{"version":489,"is_range":44,"range_type":483,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"20.04",{"ecosystem":9,"name":491,"vendor":9,"product":491,"cpe_part":9,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":492},"Firefox",[493,498],{"version":494,"is_range":495,"range_type":483,"version_start":9,"version_start_type":9,"version_end":496,"version_end_type":497,"fixed_in":9},"lt78.0",true,"78.0","excluding",{"version":499,"is_range":495,"range_type":137,"version_start":500,"version_start_type":501,"version_end":502,"version_end_type":497,"fixed_in":9},">= unspecified, \u003C 78","unspecified","including","78",{"ecosystem":9,"name":504,"vendor":505,"product":506,"cpe_part":507,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":508},"firefox esr","mozilla","firefox_esr","a",[509,512],{"version":510,"is_range":495,"range_type":483,"version_start":9,"version_start_type":9,"version_end":511,"version_end_type":497,"fixed_in":9},"lt68.10.0","68.10.0",{"version":513,"is_range":495,"range_type":137,"version_start":500,"version_start_type":501,"version_end":514,"version_end_type":497,"fixed_in":9},">= unspecified, \u003C 68.10","68.10",{"ecosystem":9,"name":516,"vendor":505,"product":517,"cpe_part":507,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":518},"Thunderbird","thunderbird",[519,520],{"version":510,"is_range":495,"range_type":483,"version_start":9,"version_start_type":9,"version_end":511,"version_end_type":497,"fixed_in":9},{"version":521,"is_range":495,"range_type":137,"version_start":500,"version_start_type":501,"version_end":511,"version_end_type":497,"fixed_in":9},">= unspecified, \u003C 68.10.0",{"ecosystem":9,"name":523,"vendor":524,"product":523,"cpe_part":479,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":525},"leap","opensuse",[526,528],{"version":527,"is_range":44,"range_type":483,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15.1",{"version":529,"is_range":44,"range_type":483,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"15.2"]