Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade seamonkeyUpgrade firefox-esrUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade libxulUpgrade firefoxUpgrade waterfoxUpgrade linux-firefoxUpgrade linux-thunderbird | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gtk3-dataUpgrade firefox-libffi4Upgrade mozillafirefox-branding-sleUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-thaiUpgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gtk3-immodule-vietnameseUpgrade enigmailUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libcairo-gobject2Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-gio-branding-upstreamUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade libfirefox-gobject-2_0-0Upgrade firefox-glib2-langUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gmodule-2_0-0Upgrade MozillaFirefoxUpgrade MozillaThunderbirdUpgrade libsoftokn3-32bitUpgrade mozilla-nspr-develUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libcairo2Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-toolsUpgrade firefox-gtk3-branding-upstreamUpgrade libfreebl3Upgrade firefox-gtk3-immodule-ximUpgrade mozillafirefox-buildsymbolsUpgrade firefox-libffi7Upgrade firefox-libgtk-3-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-atk-langUpgrade libfreebl3-32bitUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-certsUpgrade firefox-libpango-1_0-0Upgrade MozillaFirefox-translations-otherUpgrade mozilla-nssUpgrade libfirefox-glib-2_0-0Upgrade MozillaThunderbird-translations-otherUpgrade mozilla-nss-32bitUpgrade firefox-glib2-toolsUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libsoftokn3Upgrade mozilla-nss-develUpgrade MozillaFirefox-devel | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub