CVE-2020-35112

CVE-2020-35112 describes a critical vulnerability in Firefox, Thunderbird, and Firefox ESR on Windows, where opening a downloaded file without an extension could inadvertently launch an identically named executable from the same directory. This high-severity flaw (CVSS 8.8) allows for remote code execution with user interaction, as an attacker could trick a user into downloading a benign-looking file to execute malicious code. While the vulnerability has a high risk score, there is no evidence of active exploitation, nor are there public exploit codes or Metasploit modules available. Community discussion and media coverage are minimal, suggesting low current attention.