← CVE Radar
CVE-2019-11707Mozilla Firefox and Thunderbird Type Confusion Vulnerability
A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2.
8.8 HIGHEPSS 37.95%⚡ Known Exploited (CISA KEV)NVD: Published
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 8.8 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Details
- CVE ID
- CVE-2019-11707
- Status
- Published
- Assigner (CNA)
- mozilla
- Published
- Jul 23, 2019
- Last modified
- 2025-10-21 23:45 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
MozillaFirefox ESR1 version range
- before 60.7.1
MozillaFirefox1 version range
- before 67.0.3
MozillaThunderbird1 version range
- before 60.7.2
References
Sources
- NVD (unavailable at last refresh)
- CVE.org
- CISA KEV
- FIRST EPSS