Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade waterfoxUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade libxulUpgrade firefoxUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade firefox-esrUpgrade thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libcairo-gobject2Upgrade mozillafirefox-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nspr-32bitUpgrade firefox-libffi4Upgrade firefox-libharfbuzz0Upgrade mozillafirefox-translations-otherUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libatk-1_0-0Upgrade mozillathunderbird-translations-otherUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-toolsUpgrade mozillafirefox-translations-commonUpgrade firefox-gtk3-dataUpgrade firefox-gio-branding-upstreamUpgrade enigmailUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-langUpgrade mozillathunderbirdUpgrade MozillaThunderbird-buildsymbolsUpgrade libfirefox-gobject-2_0-0Upgrade firefox-glib2-langUpgrade firefox-gdk-pixbuf-langUpgrade mozilla-nss-develUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfirefox-glib-2_0-0Upgrade mozillathunderbird-translations-commonUpgrade firefox-atk-langUpgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-toolsUpgrade libfreebl3Upgrade libfreebl3-32bitUpgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libpango-1_0-0Upgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade libfirefox-gio-2_0-0Upgrade libsoftokn3Upgrade firefox-gtk3-toolsUpgrade mozillafirefox-branding-sledUpgrade mozillafirefox-develUpgrade mozillafirefoxUpgrade mozillafirefox-buildsymbolsUpgrade firefox-libffi7Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nssUpgrade firefox-libgtk-3-0 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub