coldbraid

CVE-2019-11707 Mozilla Firefox And Thunderbird

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

CVSS
not scored

CWE-843

On CISA’s exploited list

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Added
2022-05-23
Federal patch deadline
2022-06-13
Ransomware use
not known