Skip to content
Not rated

CVE-2020-26966 Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for…

Description

Searching for a single word from the address bar caused an mDNS request to be sent on the local network searching for a hostname consisting of that string; resulting in an information leak. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 83, Firefox ESR < 78.5, and Thunderbird < 78.5.

Affected products and versions

Product Affected versions Fixed in
Firefox 83 earliest → < 83 83
Firefox ESR 78.5 earliest → < 78.5 78.5
Thunderbird 78.5 earliest → < 78.5 78.5
The 2221 CVEs of Firefox →
Track this CVE