PT-2020-16572

CVE-2020-26957

Published

2020-11-21

Updated

2026-10-31

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 83

Description The issue is related to a missing service initialization in OneCRL, which could result in a failure to enforce some certificate revocations. This problem only affects Firefox for Android, with other operating systems being unaffected.

Recommendations For versions prior to 83, update to version 83 or later to resolve the issue.

Exploitability

Fix

Impacts

Researchers

Kevin Brosnan

Vendors

Affected products

Weakness enumeration

CWE-665: Improper Initialization

Related identifiers

CVE-2020-26957