ZeroHour

CVE-2019-17010

PoC
CVSS 3.1
7.5 high
EPSS
2%p74
Published
()
Modified
Description

Under certain conditions, when checking the Resist Fingerprinting preference during device orientation checks, a race condition could have caused a use-after-free and a potentially exploitable crash. This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.

Vendors
mozillaopensusecanonical
Products
firefox, firefox esr, thunderbird, leap, ubuntu linux
Weakness
CWE-362
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.