The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
If a Sandbox content process is compromised, it can initiate an FTP download which will then use a child process to render the downloaded data. The downloaded data can then be passed to the Chrome process with an arbitrary file length supplied by an attacker, bypassing sandbox protections and allow for a potential memory read of adjacent data from the privileged Chrome process, which may include sensitive data. This vulnerability affects Firefox < 66.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Apr 26, 2019 |
| Freebsd | — | Upgrade libxulUpgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade waterfoxUpgrade linux-firefoxUpgrade linux-seamonkeyUpgrade linux-thunderbirdUpgrade firefox-esr | Mar 20, 2019 | Mar 19, 2019 |
| Mfsa2019 07 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 66.0 | Mar 20, 2019 | Mar 19, 2019 |
| Ubuntu | — | Upgrade firefox | Apr 1, 2019 | Mar 19, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub