Mozilla developers and community members reported memory safety bugs present in Firefox 67. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade waterfoxUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade seamonkeyUpgrade firefoxUpgrade libxul | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade libfreebl3-32bitUpgrade mozilla-nssUpgrade firefox-libffi7Upgrade firefox-libgtk-3-0Upgrade mozillafirefox-develUpgrade mozillathunderbird-translations-commonUpgrade firefox-gtk3-toolsUpgrade libfirefox-gio-2_0-0Upgrade mozilla-nss-develUpgrade mozilla-nss-certs-32bitUpgrade mozilla-nss-certsUpgrade firefox-atk-langUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libpango-1_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libsoftokn3Upgrade firefox-gtk3-immodule-ximUpgrade mozilla-nss-32bitUpgrade mozillafirefox-buildsymbolsUpgrade firefox-glib2-toolsUpgrade libfirefox-glib-2_0-0Upgrade mozillafirefoxUpgrade mozillafirefox-branding-sledUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-libcairo2Upgrade libfreebl3Upgrade libfirefox-gmodule-2_0-0Upgrade MozillaThunderbird-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade firefox-glib2-langUpgrade mozillathunderbirdUpgrade mozillathunderbird-translations-otherUpgrade firefox-gtk3-immodule-inuktitutUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-dataUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-langUpgrade mozilla-nspr-32bitUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libffi4Upgrade firefox-libatk-1_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libharfbuzz0Upgrade firefox-libcairo-gobject2Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-multipressUpgrade mozillafirefox-translations-otherUpgrade mozilla-nsprUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gio-branding-upstreamUpgrade enigmailUpgrade firefox-gtk3-immodule-thaiUpgrade mozillafirefox-translations-commonUpgrade mozilla-nspr-develUpgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-amharic | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub