VULNERABILITY INTELLIGENCE

CVE-2020-12414

CVSS score6.5 MEDIUM

EPSS probability0.68%

CISA KEVNot currently listed

Published2020-07-09

Last modified2026-08-19

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.

Weakness classification

nvd@nist.gov: CWE-459

Primary references

security@mozilla.org — Issue Tracking, Permissions Required, Vendor Advisory
security@mozilla.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory