AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-12421

MEDIUM · CVSS 6.5 EPSS 1.84%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-07-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2020-12421
Severity
MEDIUM
CVSS
6.5
EPSS
1.84%
Firefox

Original NVD Description

When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by an administrator.) This could have caused add-ons to become out-of-date silently without notification to the user. This vulnerability affects Firefox ESR < 68.10, Firefox < 78, and Thunderbird < 68.10.0.