CVE-2020-12414

MediumCVSS 6.5/10Last modified Aug 19, 2026

Description

IndexedDB should be cleared when leaving private browsing mode and it is not, the API for WKWebViewConfiguration was being used incorrectly and requires the private instance of this object be deleted when leaving private mode. This vulnerability affects Firefox for iOS < 27.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-459

Affected software

No affected versions have been published.

Timeline

Published: Jul 9, 2020
Last modified: Aug 19, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-124156.5When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a su CVE-2020-124168.8A VideoStreamEncoder may have been freed in a race condition with VideoBroadcaster::AddOrUpdateSink, resulting in a use-after-free, memory c CVE-2020-124178.8Due to confusion about ValueTags on JavaScript Objects, an object may pass through the type barrier, resulting in memory corruption and a po CVE-2020-124186.5Manipulating individual parts of a URL object could have caused an out-of-bounds read, leaking process memory to malicious JavaScript. This CVE-2020-124198.8When processing callbacks that occurred during window flushing in the parent process, the associated window may die; causing a use-after-fre CVE-2020-12425.3An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information CVE-2020-124208.8When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and CVE-2020-124216.5When performing add-on updates, certificate chains terminating in non-built-in-roots were rejected (even if they were legitimately added by CVE-2020-124228.8In non-standard configurations, a JPEG image created by JavaScript could have caused an internal variable to overflow, resulting in an out o CVE-2020-124237.8When the Windows DLL "webauthn.dll" was missing from the Operating System, and a malicious one was placed in a folder in the user's %PATH%, CVE-2020-124246.5When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been t CVE-2020-124256.5Due to confusion processing a hyphen character in Date.parse(), a one-byte out of bounds read could have occurred, leading to potential info