Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade firefox-esrUpgrade libxulUpgrade linux-seamonkeyUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-firefoxUpgrade linux-thunderbirdUpgrade waterfox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade mozilla-nspr-32bitUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-glib2-langUpgrade firefox-gtk3-immodule-amharicUpgrade mozillafirefox-branding-sleUpgrade MozillaFirefox-translations-commonUpgrade mozilla-nsprUpgrade firefox-libffi4Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-dataUpgrade mozillafirefox-branding-upstreamUpgrade libfirefox-gthread-2_0-0Upgrade firefox-libcairo-gobject2Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-langUpgrade enigmailUpgrade firefox-gio-branding-upstreamUpgrade libfirefox-gobject-2_0-0Upgrade MozillaFirefoxUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade MozillaThunderbirdUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nspr-develUpgrade mozilla-nss-32bitUpgrade firefox-libpango-1_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nss-develUpgrade MozillaThunderbird-translations-otherUpgrade firefox-libcairo2Upgrade firefox-atk-langUpgrade MozillaFirefox-develUpgrade firefox-gdk-pixbuf-langUpgrade libfirefox-glib-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade firefox-glib2-toolsUpgrade firefox-libffi7Upgrade MozillaThunderbird-translations-commonUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-ximUpgrade mozilla-nssUpgrade libfreebl3Upgrade firefox-gtk3-toolsUpgrade libfreebl3-32bitUpgrade mozilla-nss-certsUpgrade MozillaFirefox-translations-otherUpgrade libfirefox-gio-2_0-0Upgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libsoftokn3 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub