VIR Vulnerability Intelligence Relay

CVE-2020-12390

critical
Published — · Modified —
CVSS v3
—
CVSS v2
—
VIR risk
9.5

Description

Incorrect origin serialization of URLs with IPv6 addresses could lead to incorrect security checks. This vulnerability affects Firefox < 76.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2020-12390

vendor Authored 2026-05-27

Vendor advisory: arch — https://security.archlinux.org/ASA-202005-3

OS impact
OSVersionStatusFixed in
arch archfixed76.0-1
debian debiansidfixed76.0-1

References

Verify integrity in audit chain (admin only). AS-IS.