When a user navigates to site marked as unsafe by the Safebrowsing API, warning messages are displayed and navigation is interrupted but resources from the same site loaded through websockets are not blocked, leading to the loading of unsafe resources and bypassing safebrowsing protections. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade firefoxUpgrade linux-thunderbirdUpgrade thunderbirdUpgrade firefox-esrUpgrade libxulUpgrade linux-firefoxUpgrade seamonkeyUpgrade waterfox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libharfbuzz0Upgrade mozilla-nsprUpgrade mozilla-nss-toolsUpgrade libfirefox-gobject-2_0-0Upgrade libsoftokn3-32bitUpgrade MozillaThunderbird-translations-otherUpgrade mozilla-nspr-develUpgrade firefox-gtk3-langUpgrade mozilla-nspr-32bitUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaFirefox-develUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfirefox-gthread-2_0-0Upgrade enigmailUpgrade MozillaFirefoxUpgrade firefox-libatk-1_0-0Upgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk3-dataUpgrade MozillaFirefox-translations-commonUpgrade MozillaThunderbirdUpgrade firefox-libcairo-gobject2Upgrade mozillafirefox-branding-sleUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libgtk-3-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-glib2-toolsUpgrade firefox-libcairo2Upgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-certs-32bitUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-toolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfreebl3Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nssUpgrade libfirefox-gio-2_0-0Upgrade libsoftokn3Upgrade firefox-libpango-1_0-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-atk-langUpgrade firefox-libffi7Upgrade MozillaThunderbird-translations-commonUpgrade mozilla-nss-develUpgrade libfreebl3-32bitUpgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-certsUpgrade mozilla-nss-32bit | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub