Exploited vulnerability

CVE-2019-11707

TLP:CLEAR

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

Facts

Vendor: Mozilla
Product: Firefox and Thunderbird
CVSS: 8.8
EPSS (probability of exploitation within 30 days): 38 %
On CISA's Known Exploited Vulnerabilities list since: 23 May 2022
First known exploitation: 23 May 2022
CISA's deadline for US federal agencies: 13 June 2022
Weakness: CWE-843
First seen by Risk Letters: 23 May 2022

Members see which Nordic sectors the flaw hits, and what to do about it.

Get the full brief

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX. NVD