CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.8. It affects Windows, Firefox.
CVE
CVE-2020-35112
Severity
HIGH
CVSS
8.8
EPSS
1.25%
Windows Firefox
Original NVD Description
If a user downloaded a file lacking an extension on Windows, and then "Open"-ed it from the downloads panel, if there was an executable file in the downloads directory with the same name but with an executable extension (such as .bat or .exe) that executable would have been launched instead. *Note: This issue only affected Windows operating systems. Other operating systems are unaffected.*. This vulnerability affects Firefox < 84, Thunderbird < 78.6, and Firefox ESR < 78.6.
Related CVEs
Other vulnerabilities affecting the same vendor(s)