{
  "cveId": "CVE-2020-26962",
  "url": "https://patchblox.com/security/cve/CVE-2020-26962",
  "summary": "CVE-2020-26962 is fixed in 4 products on 2 platforms, first by firefox 83.0\u002Bbuild2-0ubuntu0.18.04.2, released November 16, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Firefox ESR and 1 other: Cross-origin iframes that contained a login form could have been recognized by the login autofill service,\u2026",
  "description": "Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox \u003C 83.",
  "published": "2020-11-16T16:00:00Z",
  "severity": "Low",
  "cvss": 6.1,
  "epss": 0.00698,
  "epssPercentile": 0.53347,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2020-26962",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "91.0",
      "fix": "Mozilla Firefox ESR (en-US) 91.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-91.0",
      "released": "2021-08-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "fix": "firefox 83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-83.0-build2-0ubuntu0.18.04.2",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox 83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-83.0-build2-0ubuntu0.20.04.1",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "fix": "firefox-geckodriver 83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-83.0-build2-0ubuntu0.18.04.2",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-83.0-build2-0ubuntu0.20.04.1",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "fix": "firefox-mozsymbols 83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-83.0-build2-0ubuntu0.18.04.2",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-83.0-build2-0ubuntu0.20.04.1",
      "released": "2020-11-16T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}