{"cve":{"cve_id":"CVE-2020-15671","is_kev":false,"kev_date_added":null,"kev_vendor_project":null,"kev_product":null,"kev_vulnerability_name":null,"kev_short_description":null,"kev_required_action":null,"kev_due_date":null,"kev_known_ransomware":null,"kev_notes":null,"kev_cwes":null,"epss_score":0.00488,"epss_percentile":0.39906,"epss_as_of":"2026-08-26","description":"When typing in a password under certain conditions, a race may have occured where the InputContext was not being correctly set for the input field, resulting in the typed password being saved to the keyboard dictionary. This vulnerability affects Firefox for Android < 80.","published_at":"2020-10-01T18:41:30Z","last_modified_at":"2026-08-19T15:29:21.807000Z","cvss_v3_score":3.1,"cvss_v3_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N","cvss_v3_severity":"LOW","cvss_v4_score":null,"cvss_v4_vector":null,"cvss_v4_severity":null,"ssvc_decision":null,"ssvc_exploitation":null,"ssvc_automatable":null,"ssvc_technical_impact":null,"cwes":["CWE-200","CWE-362"],"nvd_references":["https://www.mozilla.org/security/advisories/mfsa2020-39/","https://bugzilla.mozilla.org/show_bug.cgi?id=1653862"],"vuln_status":"Modified","trending_score":null,"is_trending":false,"has_trended":false,"trended_number_one":false,"trending_peak_score":null,"trending_peak_rank":null,"started_trending_at":null,"trended_number_one_at":null,"summary_generated":null,"summary_generated_at":null,"summary_model":null,"created_at":"2026-06-24T00:09:39.878444Z","updated_at":"2026-08-19T22:46:07.022534Z"},"effective_severity":"LOW","badges":[],"impact_analysis":[],"cvss_v3_decoded":{"version":"3.1","metrics":[{"metric":"AV","name":"Attack Vector","value":"N","value_label":"Network"},{"metric":"AC","name":"Attack Complexity","value":"H","value_label":"High"},{"metric":"PR","name":"Privileges Required","value":"N","value_label":"None"},{"metric":"UI","name":"User Interaction","value":"R","value_label":"Required"},{"metric":"S","name":"Scope","value":"U","value_label":"Unchanged"},{"metric":"C","name":"Confidentiality","value":"L","value_label":"Low"},{"metric":"I","name":"Integrity","value":"N","value_label":"None"},{"metric":"A","name":"Availability","value":"N","value_label":"None"}]},"cvss_v4_decoded":{"version":null,"metrics":[]},"affected":[{"vendor_slug":"mozilla","vendor_name":"Mozilla","product_slug":"firefox-for-android","product_name":"Firefox for Android","version_start":"unspecified","version_start_inclusive":true,"version_end":"80","version_end_inclusive":false,"cpe23_uri":"cve5:mozilla:firefox-for-android:unspecified:80"},{"vendor_slug":"mozilla","vendor_name":"Mozilla","product_slug":"firefox-mobile","product_name":"firefox_mobile","version_start":null,"version_start_inclusive":null,"version_end":"80.0","version_end_inclusive":false,"cpe23_uri":"cpe:2.3:a:mozilla:firefox_mobile:*:*:*:*:*:android:*:*"}],"exploit_refs":[],"news":[],"references":[{"url":"https://www.mozilla.org/security/advisories/mfsa2020-39/","source_type":"VENDOR_ADVISORY","tags":["advisory"]},{"url":"https://bugzilla.mozilla.org/show_bug.cgi?id=1653862","source_type":"MISC","tags":[]}],"timeline":[{"type":"published","at":"2020-10-01T18:41:30Z","label":"CVE published","source":null},{"type":"cvss_changed","at":"2026-08-19T16:41:57.515079Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-08-19T16:41:57.515079Z","label":"CVSS score revised","source":"nvd"},{"type":"cvss_changed","at":"2026-08-19T16:41:57.515079Z","label":"CVSS score revised","source":"nvd"}]}