Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Mozilla Firefox, Firefox ESR, Thunderbird 60.6.1, 66.0.1 Clear all filters
TI-2019-07196 CVE-2019-9810 · GHSA-j339-cxg8-wjf2

Memory corruption in Mozilla Firefox

Priority MEDIUM 60

Incorrect alias information in IonMonkey JIT compiler for Array.prototype.slice method may lead to missing bounds check and a buffer overflow.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.27207 Published 2019-04-26 Fixed in 66.0.1, 60.6.1 CWE-119
TI-2019-07199 CVE-2019-9813 · GHSA-qxrm-24v6-5c8c

Type confusion in Mozilla Firefox

Priority MEDIUM 48

Incorrect handling of __proto__ mutations may lead to type confusion in IonMonkey JIT code and can be leveraged for arbitrary memory read and write.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.06749 Published 2019-04-26 Fixed in 66.0.1, 60.6.1 CWE-843