CVE-2019-11707

Severity

high · on CISA KEV actively exploited

Source

CISA-KEV · kev

Published

2022-05-23

Reference

https://nvd.nist.gov/vuln/detail/CVE-2019-11707

⌖ exploited in the wild shame 50/100 exploited-in-wild

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

Players implicated

mozilla · vendor Firefox and Thunderbird · product

Description

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.