CVE-2020-6812: Canonical Ubuntu Linux

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera or microphone permission are able to enumerate device names, disclosing the user's name. To resolve this issue, Firefox added a special case that renames devices containing the substring 'AirPods' to simply 'AirPods'. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.

Affected products

• Canonical Ubuntu Linux: version 16.04 only; version 18.04 only; version 19.10 only
• Mozilla Firefox: before 74.0 (fixed in 74.0)
• Mozilla Firefox ESR: before 68.6.0 (fixed in 68.6.0)
• Mozilla Thunderbird: before 68.6.0 (fixed in 68.6.0)

Published 2020-03-25. Last modified 2026-06-17.