CVE-2020-12414

6.5 mediumEPSS 0.7%

Medium (6.5) in mozilla firefox mobile. EPSS 0.7% chance of exploitation in the next 30 days.

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-459
Published: 2020-07-09
Modified: 2026-08-19
Record from: the NVD, synced 2026-10-19

Affected

mozilla:firefox_mobile

References

https://bugzilla.mozilla.org/show_bug.cgi?id=1646756
https://www.mozilla.org/security/advisories/mfsa2020-23/
https://bugzilla.mozilla.org/show_bug.cgi?id=1646756
https://www.mozilla.org/security/advisories/mfsa2020-23/

Check your stack JSON