{
  "cveId": "CVE-2020-26967",
  "url": "https://patchblox.com/security/cve/CVE-2020-26967",
  "summary": "CVE-2020-26967 is fixed in 4 products on 2 platforms, first by firefox 83.0\u002Bbuild2-0ubuntu0.18.04.2, released November 16, 2020. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Firefox ESR and 1 other: When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox\u2026",
  "description": "When listening for page changes with a Mutation Observer, a malicious web page could confuse Firefox Screenshots into interacting with elements other than those that it injected into the page. This would lead to internal errors and unexpected behavior in the Screenshots code. This vulnerability affects Firefox \u003C 83.",
  "published": "2020-11-16T16:00:00Z",
  "severity": "Low",
  "cvss": 6.5,
  "epss": 0.0085,
  "epssPercentile": 0.58417,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2020-26967",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "91.0",
      "fix": "Mozilla Firefox ESR (en-US) 91.0",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-91.0",
      "released": "2021-08-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "fix": "firefox 83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-83.0-build2-0ubuntu0.18.04.2",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox 83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-83.0-build2-0ubuntu0.20.04.1",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "fix": "firefox-geckodriver 83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-83.0-build2-0ubuntu0.18.04.2",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-geckodriver 83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-83.0-build2-0ubuntu0.20.04.1",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "fix": "firefox-mozsymbols 83.0\u002Bbuild2-0ubuntu0.18.04.2",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-83.0-build2-0ubuntu0.18.04.2",
      "released": "2020-11-16T16:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "fix": "firefox-mozsymbols 83.0\u002Bbuild2-0ubuntu0.20.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-83.0-build2-0ubuntu0.20.04.1",
      "released": "2020-11-16T16:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}