CVE catalog

CVE-2020-26979

UBUNTU-CVE-2020-26979

[CVE catalog]

Severity
Medium · CVSS 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.73% · Oct 25, 2026

When a user typed a URL in the address bar or the search bar and quickly hit the enter key, a website could sometimes capture that event and then redirect the user before navigation occurred to the desired, entered address. To construct a convincing spoof the attacker would have had to guess what the user was typing, perhaps by suggesting it. This vulnerability affects Firefox < 84.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntufirefox16.0441.0.2+build2-0ubuntu1vulnerable
Ubuntufirefox16.0442.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0444.0+build3-0ubuntu2vulnerable
Ubuntufirefox16.0444.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0444.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0+build2-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox16.0445.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox16.0446.0+build5-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0446.0.1+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0447.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0448.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0+build4-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0449.0.2+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0450.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0450.1.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0451.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0452.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0452.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0453.0.2+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0453.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0454.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0455.0.1+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0455.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0456.0+build6-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0457.0+build4-0ubuntu0.16.04.6vulnerable
Ubuntufirefox16.0457.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0457.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0+build6-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0458.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0459.0.2+build1-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0460.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0460.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0461.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0461.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0462.0+build2-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0462.0.3+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0+build2-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0463.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0464.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0465.0.1+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0+build3-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0466.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.4+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0466.0.5+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0467.0.4+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0468.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0+build2-0ubuntu0.16.04.4vulnerable
Ubuntufirefox16.0469.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0469.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0470.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0471.0+build5-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0472.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0473.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0474.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0475.0+build3-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0476.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0477.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0478.0.2+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0479.0+build1-0ubuntu0.16.04.2vulnerable
Ubuntufirefox16.0480.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0480.0.1+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0481.0+build2-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0481.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0482.0+build2-0ubuntu0.16.04.5vulnerable
Ubuntufirefox16.0482.0.2+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0482.0.3+build1-0ubuntu0.16.04.1vulnerable
Ubuntufirefox16.0483.0+build2-0ubuntu0.16.04.3vulnerable
Ubuntufirefox16.0484.0+build3-0ubuntu0.16.04.1fixed
Ubuntufirefox18.0456.0+build6-0ubuntu1vulnerable
Ubuntufirefox18.0457.0.1+build2-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox18.0459.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox18.0460.0+build2-0ubuntu1vulnerable
Ubuntufirefox18.0460.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0460.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0461.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.3vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.4vulnerable
Ubuntufirefox18.0462.0+build2-0ubuntu0.18.04.5vulnerable
Ubuntufirefox18.0462.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0463.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0463.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0464.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0465.0.1+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.4+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0466.0.5+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0467.0.4+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0468.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0469.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0470.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0471.0+build5-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0472.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0473.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0474.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0475.0+build3-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0476.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0477.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0478.0.2+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0479.0+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0480.0.1+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0481.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0481.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0+build2-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0.2+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0482.0.3+build1-0ubuntu0.18.04.1vulnerable
Ubuntufirefox18.0483.0+build2-0ubuntu0.18.04.2vulnerable
Ubuntufirefox18.0484.0+build3-0ubuntu0.18.04.1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Ubuntufirefoxdeb16.0484.0+build3-0ubuntu0.16.04.1Not reportedUBUNTU-CVE-2020-26979Not reported
Ubuntufirefoxdeb18.0484.0+build3-0ubuntu0.18.04.1Not reportedUBUNTU-CVE-2020-26979Not reported
Ubuntufirefoxdeb20.0484.0+build3-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2020-26979Not reported

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References