Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbirdUpgrade firefoxUpgrade libxulUpgrade firefox-esrUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade waterfox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libffi4Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-langUpgrade libfirefox-gobject-2_0-0Upgrade mozillafirefox-branding-sleUpgrade mozillafirefox-translations-commonUpgrade enigmailUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-develUpgrade mozillafirefox-branding-upstreamUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-libharfbuzz0Upgrade mozillafirefox-translations-otherUpgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nss-toolsUpgrade firefox-libcairo-gobject2Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nsprUpgrade libsoftokn3-32bitUpgrade mozillathunderbirdUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-glib2-langUpgrade mozillathunderbird-translations-otherUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-libgtk-3-0Upgrade firefox-glib2-toolsUpgrade libfirefox-glib-2_0-0Upgrade libsoftokn3Upgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-32bitUpgrade mozillafirefox-develUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-gtk3-toolsUpgrade mozillathunderbird-translations-commonUpgrade libfreebl3-32bitUpgrade firefox-libffi7Upgrade mozilla-nssUpgrade mozilla-nss-certsUpgrade firefox-libpango-1_0-0Upgrade mozillafirefox-branding-sledUpgrade mozillafirefoxUpgrade firefox-libcairo2Upgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk3-immodule-ximUpgrade libfreebl3Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gdk-pixbuf-langUpgrade firefox-atk-langUpgrade mozilla-nss-develUpgrade libfirefox-gio-2_0-0 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub