Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2020-6789 State: PUBLISHED Published: 2021-03-25T15:53:03.874748Z Last Updated: 2024-09-16T19:29:59.857Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Monitor Wall Problem Types: CWE-427 Description: Loading a DLL through an Uncontrolled Search Path Element in the Bosch Monitor Wall installer up to and including version 10.00.0164 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious DLL in the same directory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/secu
installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
CVE ID: CVE-2020-6790 State: PUBLISHED Published: 2021-03-25T15:53:57.342668Z Last Updated: 2024-09-17T04:25:29.649Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Bosch Products: Video Streaming Gateway Problem Types: CWE-427 Description: Calling an executable through an Uncontrolled Search Path Element in the Bosch Video Streaming Gateway installer up to and including version 6.45.10 potentially allows an attacker to execute arbitrary code on a victim's system. A prerequisite is that the victim is tricked into placing a malicious exe in the same directory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - h
e same directory where the installer is started from. Additional Analyst Notes: - CVE Program Container: References: - https://psirt.bosch.com/security-advisories/bosch-sa-835563-bt.html
CVE ID: CVE-2020-6792 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.119Z Vendors: Mozilla Products: Thunderbird Problem Types: Message ID calculcation was based on uninitialized data Description: When deriving an identifier for an email message, uninitialized memory was used in addition to the message contents. This vulnerability affects Thunderbird < 68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1609607 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6793 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.026Z Vendors: Mozilla Products: Thunderbird Problem Types: Out-of-bounds read when processing certain email messages Description: When processing an email message with an ill-formed envelope, Thunderbird could read data from a random memory location. This vulnerability affects Thunderbird < 68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1608539 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6794 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.144Z Vendors: Mozilla Products: Thunderbird Problem Types: Setting a master password post-Thunderbird 52 does not delete unencrypted previously stored passwords Description: If a user saved passwords before Thunderbird 60 and then later set a master password, an unencrypted copy of these passwords is still accessible. This is because the older stored password file was not deleted when the data was copied to a new format starting in Thunderbird 60. The new master password is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This
is added only on the new file. This could allow the exposure of stored password data outside of user expectations. This vulnerability affects Thunderbird < 68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1606619 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6795 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.139Z Vendors: Mozilla Products: Thunderbird Problem Types: Crash processing S/MIME messages with multiple signatures Description: When processing a message that contains multiple S/MIME signatures, a bug in the MIME processing code caused a null pointer dereference, leading to an unexploitable crash. This vulnerability affects Thunderbird < 68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1611105 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/
ps://bugzilla.mozilla.org/show_bug.cgi?id=1611105 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6796 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.019Z Vendors: Mozilla Products: Firefox Problem Types: Missing bounds check on shared memory read in the parent process Description: A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an out-of-bound write. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 73 and Firefox < ESR68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://www.mozilla.org/security/advisories/mfsa2020-06/ -
- https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://www.mozilla.org/security/advisories/mfsa2020-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1610426 - https://usn.ubuntu.com/4278-2/ - https://security.gentoo.org/glsa/202003-02
CVE ID: CVE-2020-6797 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.129Z Vendors: Mozilla Products: Thunderbird, Firefox Problem Types: Extensions granted downloads.open permission could open arbitrary applications on Mac OSX Description: By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact. Note: this issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Fi
issue only occurs on Mac OSX. Other operating systems are unaffected. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://www.mozilla.org/security/advisories/mfsa2020-06/ - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1596668 - https://security.gentoo.org/glsa/202003-02
CVE ID: CVE-2020-6798 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.089Z Vendors: Mozilla Products: Thunderbird, Firefox Problem Types: Incorrect parsing of template tag could result in JavaScript injection Description: If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution when it should not be allowed. A site that relied on the browser behaving correctly could suffer a cross-site scripting vulnerability as a result. In general, this flaw cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-l
e Thunderbird product because scripting is disabled when reading mail, but is potentially a risk in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://www.mozilla.org/security/advisories/mfsa2020-06/ - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1602944 - https://usn.ubuntu.com/4278-2/ - https://security.gentoo.org/glsa/202003-02 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1
/202003-02 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6799 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.093Z Vendors: Mozilla Products: Firefox Problem Types: Arbitrary code execution when opening pdf links from other applications, when Firefox is configured as default pdf reader Description: Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported file types. This required Firefox to be configured as the default handler for a given file type and for a file downloaded to be opened in a third party application that insufficiently sanitized URL data. In that situation, clicking a link in the third party application could have been use
insufficiently sanitized URL data. In that situation, clicking a link in the third party application could have been used to retrieve and execute files whose location was supplied through command line arguments. Note: This issue only affects Windows operating systems and when Firefox is configured as the default handler for non-default filetypes. Other operating systems are unaffected. This vulnerability affects Firefox < 73 and Firefox < ESR68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://www.mozilla.org/security/advisories/mfsa2020-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1606596 - https://se
s://www.mozilla.org/security/advisories/mfsa2020-06/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1606596 - https://security.gentoo.org/glsa/202003-02
CVE ID: CVE-2020-6800 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.116Z Vendors: Mozilla Products: Thunderbird, Firefox Problem Types: Memory safety bugs fixed in Thunderbird 68.5 Description: Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. In general, these flaws cannot be exploited through email in the Thunderbird product because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. Th
oduct because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts. This vulnerability affects Thunderbird < 68.5, Firefox < 73, and Firefox < ESR68.5. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://www.mozilla.org/security/advisories/mfsa2020-06/ - https://www.mozilla.org/security/advisories/mfsa2020-07/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1595786%2C1596706%2C1598543%2C1604851%2C1608580%2C1608785%2C1605777 - https://usn.ubuntu.com/4278-2/ - https://security.gentoo.org/glsa/202003-02 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubu
.com/4278-2/ - https://security.gentoo.org/glsa/202003-02 - https://security.gentoo.org/glsa/202003-10 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6801 State: PUBLISHED Published: 2020-03-02T04:05:03 Last Updated: 2024-08-04T09:11:05.135Z Vendors: Mozilla Products: Firefox Problem Types: Memory safety bugs fixed in Firefox 73 Description: Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 73. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-05/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1601024%2C1601712%2C1604836%2C1606492 - https://
visories/mfsa2020-05/ - https://bugzilla.mozilla.org/buglist.cgi?bug_id=1601024%2C1601712%2C1604836%2C1606492 - https://usn.ubuntu.com/4278-2/
CVE ID: CVE-2020-6802 State: PUBLISHED Published: 2020-03-24T21:13:04 Last Updated: 2024-08-04T09:11:05.145Z Vendors: n/a Products: Mozilla Bleach Problem Types: mutation XSS Description: In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mozilla/bleach/security/advisories/GHSA-q65m-pv3f-wr5r - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCNLM2MGQTOLCIVVYS2Z5S7KOQJR5JC4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/
2MGQTOLCIVVYS2Z5S7KOQJR5JC4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/72R4VFFHDRSQMNT7IZU3X2755ZP4HGNI/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTULPQB7HVPPYWEYVNHJGDTSPVIDHIZX/ - https://www.checkmarx.com/blog/vulnerabilities-discovered-in-mozilla-bleach - https://advisory.checkmarx.net/advisory/CX-2020-4276
CVE ID: CVE-2020-6803 State: PUBLISHED Published: 2020-02-28T22:34:00 Last Updated: 2024-08-04T09:11:05.086Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N) Vendors: Mozilla Products: WebThings Gateway Problem Types: CWE-601 Description: An open redirect is present on the gateway's login page, which could cause a user to be redirected to a malicious site after logging in. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mozilla-iot/gateway/pull/2446
CVE ID: CVE-2020-6804 State: PUBLISHED Published: 2020-02-28T22:38:38 Last Updated: 2024-08-04T09:11:05.124Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Mozilla Products: WebThings Gateway Problem Types: CWE-79 Description: A reflected XSS vulnerability exists within the gateway, allowing an attacker to craft a specialized URL which could steal the user's authentication token. When combined with CVE-2020-6803, an attacker could fully compromise the system. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/mozilla-iot/gateway/pull/2446
CVE ID: CVE-2020-6805 State: PUBLISHED Published: 2020-03-25T21:14:20 Last Updated: 2024-08-04T09:11:05.079Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Use-after-free when removing data about origins Description: When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://www.mozilla.org/security/advisories/mfsa2020-10/ - http
tps://www.mozilla.org/security/advisories/mfsa2020-08/ - https://www.mozilla.org/security/advisories/mfsa2020-10/ - https://www.mozilla.org/security/advisories/mfsa2020-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1610880 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6806 State: PUBLISHED Published: 2020-03-25T21:14:05 Last Updated: 2024-08-04T09:11:05.025Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: BodyStream::OnInputStreamReady was missing protections against state confusion Description: By carefully crafting promise resolutions, it was possible to cause an out-of-bounds read off the end of an array resized during script execution. This could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/secur
, and Firefox ESR < 68.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://www.mozilla.org/security/advisories/mfsa2020-10/ - https://www.mozilla.org/security/advisories/mfsa2020-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1612308 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/ - http://packetstormsecurity.com/files/157524/Firefox-js-ReadableStreamCloseInternal-Out-Of-Bounds-Access.html
CVE ID: CVE-2020-6807 State: PUBLISHED Published: 2020-03-25T21:13:49 Last Updated: 2024-08-04T09:11:05.120Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Use-after-free in cubeb during stream destruction Description: When a device was changed while a stream was about to be destroyed, the <code>stream-reinit</code> task may have been executed after the stream was destroyed, causing a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - htt
nal Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://www.mozilla.org/security/advisories/mfsa2020-10/ - https://www.mozilla.org/security/advisories/mfsa2020-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1614971 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6808 State: PUBLISHED Published: 2020-03-25T21:13:32 Last Updated: 2024-08-04T09:11:05.026Z Vendors: Mozilla Products: Firefox Problem Types: URL Spoofing via javascript: URL Description: When a JavaScript URL (javascript:) is evaluated and the result is a string, this string is parsed to create an HTML document, which is then presented. Previously, this document's URL (as reported by the document.location property, for example) was the originating javascript: URL which could lead to spoofing attacks; it is now correctly the URL of the originating document. This vulnerability affects Firefox < 74. Additional Analyst Notes: - CVE Program Container: References: - https://www.m
This vulnerability affects Firefox < 74. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1247968
CVE ID: CVE-2020-6809 State: PUBLISHED Published: 2020-03-25T21:13:17 Last Updated: 2024-08-04T09:11:05.119Z Vendors: Mozilla Products: Firefox Problem Types: Web Extensions with the all-urls permission could access local files Description: When a Web Extension had the all-urls permission and made a fetch request with a mode set to 'same-origin', it was possible for the Web Extension to read local files. This vulnerability affects Firefox < 74. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1420296
CVE ID: CVE-2020-6810 State: PUBLISHED Published: 2020-03-25T21:12:58 Last Updated: 2024-08-04T09:11:05.044Z Vendors: Mozilla Products: Firefox Problem Types: Focusing a popup while in fullscreen could have obscured the fullscreen notification Description: After a website had entered fullscreen mode, it could have used a previously opened popup to obscure the notification that indicates the browser is in fullscreen mode. Combined with spoofing the browser chrome, this could have led to confusing the user about the current origin of the page and credential theft or other attacks. This vulnerability affects Firefox < 74. Additional Analyst Notes: - CVE Program Container: References: - https://
acks. This vulnerability affects Firefox < 74. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1432856
CVE ID: CVE-2020-6811 State: PUBLISHED Published: 2020-03-25T21:12:40 Last Updated: 2024-08-04T09:11:05.163Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: Devtools' 'Copy as cURL' feature did not fully escape website-controlled data, potentially leading to command injection Description: The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP method of a request, which can be controlled by the website. If a user used the 'Copy as Curl' feature and pasted the command into a terminal, it could have resulted in command injection and arbitrary command execution. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.
injection and arbitrary command execution. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://www.mozilla.org/security/advisories/mfsa2020-10/ - https://www.mozilla.org/security/advisories/mfsa2020-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1607742 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6812 State: PUBLISHED Published: 2020-03-25T21:12:19 Last Updated: 2024-08-04T09:11:05.033Z Vendors: Mozilla Products: Thunderbird, Firefox, Firefox ESR Problem Types: The names of AirPods with personally identifiable information were exposed to websites with camera or microphone permission Description: The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulne
ue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://www.mozilla.org/security/advisories/mfsa2020-10/ - https://www.mozilla.org/security/advisories/mfsa2020-09/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1616661 - https://usn.ubuntu.com/4328-1/ - https://usn.ubuntu.com/4335-1/
CVE ID: CVE-2020-6813 State: PUBLISHED Published: 2020-03-25T21:11:41 Last Updated: 2024-08-04T09:11:05.154Z Vendors: Mozilla Products: Firefox Problem Types: @import statements in CSS could bypass the Content Security Policy nonce feature Description: When protecting CSS blocks with the nonce feature of Content Security Policy, the @import statement in the CSS block could allow an attacker to inject arbitrary styles, bypassing the intent of the Content Security Policy. This vulnerability affects Firefox < 74. Additional Analyst Notes: - CVE Program Container: References: - https://www.mozilla.org/security/advisories/mfsa2020-08/ - https://bugzilla.mozilla.org/show_bug.cgi?id=1605814