VULNERABILITY INTELLIGENCE

CVE-2020-15671

CVSS score3.1 LOW

EPSS probability0.49%

CISA KEVNot currently listed

Published2020-10-01

Last modified2026-08-19

CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Description

When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.

Weakness classification

nvd@nist.gov: CWE-200

Primary references

security@mozilla.org — Issue Tracking, Permissions Required, Vendor Advisory
security@mozilla.org — Release Notes, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory