Security Advisory

CVE-2020-15654

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-08-10 17:43:24

Last updated 2024-08-04 13:22:30

Assigner mozilla

State PUBLISHED

Description

When in an endless loop, a website specifying a custom cursor using CSS could make it look like the user is interacting with the user interface, when they are not. This could lead to a perceived broken state, especially when interactions with existing browser dialogs and warnings do not work. This vulnerability affects Firefox ESR < 78.1, Firefox < 79, and Thunderbird < 78.1.

← Browse all CVEs View on cve.org ↗