CVE-2020-15664 — Mozilla: Attacker-induced prompt for extension installation

Back Back to CVE browser

MEDIUM

Mozilla: Attacker-induced prompt for extension installation

Published Oct 1, 2020

6.5

MEDIUM

CVSS 3.1

EPSS 1.38%

Description

By holding a reference to the eval() function from an about:blank window, a malicious webpage could have gained access to the InstallTrigger object which would allow them to prompt the user to install an extension. Combined with user confusion, this could result in an unintended or malicious extension being installed. This vulnerability affects Firefox < 80, Thunderbird < 78.2, Thunderbird < 68.12, Firefox ESR < 68.12, Firefox ESR < 78.2, and Firefox for Android < 80.

Affected products

Vendor Mozilla Product Firefox Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <80
Vendor Mozilla Product Firefox ESR Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <68.12
- Version
  unspecified
  Status
  affected
  Constraints
  <78.2
Vendor Mozilla Product Firefox for Android Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <80
Vendor Mozilla Product Thunderbird Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  <68.12
- Version
  unspecified
  Status
  affected
  Constraints
  <78.2

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Mozilla

Firefox

n/a

Version	Status	Constraints
unspecified	affected	<80

Mozilla

Firefox ESR

n/a

Version	Status	Constraints
unspecified	affected	<68.12
unspecified	affected	<78.2

Mozilla

Firefox for Android

n/a

Version	Status	Constraints
unspecified	affected	<80

Mozilla

Thunderbird

n/a

Version	Status	Constraints
unspecified	affected	<68.12
unspecified	affected	<78.2

Red Hat Enterprise Linux 6

firefox-0:68.12.0-1.el6_10

Fixed · RHSA-2020:3558
Red Hat Enterprise Linux 6

thunderbird-0:68.12.0-1.el6_10

Fixed · RHSA-2020:3643
Red Hat Enterprise Linux 7

firefox-0:68.12.0-1.el7_8

Fixed · RHSA-2020:3556
Red Hat Enterprise Linux 7

thunderbird-0:68.12.0-1.el7_8

Fixed · RHSA-2020:3631
Red Hat Enterprise Linux 8

firefox-0:78.2.0-2.el8_2

Fixed · RHSA-2020:3557
Red Hat Enterprise Linux 8

thunderbird-0:68.12.0-1.el8_2

Fixed · RHSA-2020:3634
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions

firefox-0:78.2.0-3.el8_0

Fixed · RHSA-2020:3555
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions

thunderbird-0:68.12.0-1.el8_0

Fixed · RHSA-2020:3633
Red Hat Enterprise Linux 8.1 Extended Update Support

firefox-0:78.2.0-3.el8_1

Fixed · RHSA-2020:3559
Red Hat Enterprise Linux 8.1 Extended Update Support

thunderbird-0:68.12.0-1.el8_1

Fixed · RHSA-2020:3632
Red Hat Enterprise Linux 5

firefox

Out of support scope
Red Hat Enterprise Linux 5

thunderbird

Out of support scope

Product	Package	State	Advisory
Red Hat Enterprise Linux 6	firefox-0:68.12.0-1.el6_10	Fixed	RHSA-2020:3558
Red Hat Enterprise Linux 6	thunderbird-0:68.12.0-1.el6_10	Fixed	RHSA-2020:3643
Red Hat Enterprise Linux 7	firefox-0:68.12.0-1.el7_8	Fixed	RHSA-2020:3556
Red Hat Enterprise Linux 7	thunderbird-0:68.12.0-1.el7_8	Fixed	RHSA-2020:3631
Red Hat Enterprise Linux 8	firefox-0:78.2.0-2.el8_2	Fixed	RHSA-2020:3557
Red Hat Enterprise Linux 8	thunderbird-0:68.12.0-1.el8_2	Fixed	RHSA-2020:3634
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions	firefox-0:78.2.0-3.el8_0	Fixed	RHSA-2020:3555
Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions	thunderbird-0:68.12.0-1.el8_0	Fixed	RHSA-2020:3633
Red Hat Enterprise Linux 8.1 Extended Update Support	firefox-0:78.2.0-3.el8_1	Fixed	RHSA-2020:3559
Red Hat Enterprise Linux 8.1 Extended Update Support	thunderbird-0:68.12.0-1.el8_1	Fixed	RHSA-2020:3632
Red Hat Enterprise Linux 5	firefox	Out of support scope	n/a
Red Hat Enterprise Linux 5	thunderbird	Out of support scope	n/a

Remediation

No remediation recorded yet.

Metrics

1.38% 0.01378

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.01378

Score over time

2021–2026

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Percentile over time

EPSS v1
EPSS v5
EPSS v2
EPSS v3
EPSS v4

Table of values (14 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	1.38% (0.01378)	71.14th	v5 (v2026.06.15)
Jun 15, 2026	1.36% (0.01361)	68.04th	v5 (v2026.06.15)
Mar 17, 2025	0.37% (0.00371)	56.74th	v4 (v2025.03.14)
Dec 12, 2024	0.29% (0.00295)	70.09th	v3 (v2023.03.01)
Mar 13, 2024	0.26% (0.00256)	64.72th	v3 (v2023.03.01)
Sep 3, 2023	0.26% (0.00256)	62.70th	v3 (v2023.03.01)
Mar 7, 2023	0.27% (0.00275)	63.02th	v3 (v2023.03.01)
Mar 6, 2023	1.11% (0.01108)	55.18th	v2 (v2022.01.01)
Apr 1, 2022	1.11% (0.01108)	51.54th	v2 (v2022.01.01)
Feb 4, 2022	8.87% (0.08874)	82.92th	v2 (v2022.01.01)
Feb 3, 2022	7.45% (0.07447)	83.93th	v1
Jan 6, 2022	7.45% (0.07447)	83.77th	v1
Jan 5, 2022	1.76% (0.01762)	75.06th	v5 (v2026.06.15)
Apr 14, 2021	1.76% (0.01762)	0.00th	v1

Weaknesses (2)

CWE-648

CWE-863

Incorrect Authorization

References (12)

https://access.redhat.com/security/cve/CVE-2020-15664
Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1658214
x_refsource_MISCIssue TrackingPermissions RequiredVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1872531
Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2020-15664
https://www.cve.org/CVERecord?id=CVE-2020-15664
https://www.mozilla.org/en-US/security/advisories/mfsa2020-37/#CVE-2020-15664
https://www.mozilla.org/security/advisories/mfsa2020-36/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-37/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-38/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-39/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-40/
x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-41/
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://access.redhat.com/security/cve/CVE-2020-15664		Vendor Advisory
https://bugzilla.mozilla.org/show_bug.cgi?id=1658214		x_refsource_MISCIssue TrackingPermissions RequiredVendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1872531		Issue Tracking
https://nvd.nist.gov/vuln/detail/CVE-2020-15664
https://www.cve.org/CVERecord?id=CVE-2020-15664
https://www.mozilla.org/en-US/security/advisories/mfsa2020-37/#CVE-2020-15664
https://www.mozilla.org/security/advisories/mfsa2020-36/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-37/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-38/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-39/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-40/		x_refsource_MISCVendor Advisory
https://www.mozilla.org/security/advisories/mfsa2020-41/		x_refsource_MISCVendor Advisory