CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2019-07-23
Mozilla Firefox and Thunderbird Sandbox Escape and Remote Code Execution Vulnerability via IPC Parameter Validation Flaw (CVE-2019-11708)
[Affected Scope] Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2
[Impact] Insufficient validation of IPC parameters passed from child to parent processes allows a compromised child process to bypass sandbox restrictions and trigger arbitrary web content loading in the non-sandboxed parent process.
[Mitigation] Immediately upgrade all affected installations to Firefox 67.0.4, Firefox ESR 60.7.2, or Thunderbird 60.7.2 or higher.