Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 8.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade seamonkeyUpgrade waterfoxUpgrade linux-firefoxUpgrade libxulUpgrade linux-thunderbirdUpgrade firefoxUpgrade thunderbirdUpgrade firefox-esrUpgrade linux-seamonkey | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0Upgrade to the latest version of Mozilla Firefox | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0Upgrade to the latest version of Mozilla Thunderbird | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade MozillaThunderbirdUpgrade mozilla-nssUpgrade libsoftokn3Upgrade firefox-gtk3-dataUpgrade MozillaThunderbird-translations-otherUpgrade libsoftokn3-32bitUpgrade MozillaFirefox-develUpgrade firefox-gtk3-immodule-thaiUpgrade libfreebl3Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-ximUpgrade firefox-libatk-1_0-0Upgrade mozilla-nspr-32bitUpgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-toolsUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-glib2-langUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade libfirefox-gthread-2_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodules-tigrignaUpgrade mozilla-nss-develUpgrade mozilla-nspr-develUpgrade mozilla-nss-toolsUpgrade firefox-libgtk-3-0Upgrade MozillaFirefox-translations-otherUpgrade firefox-gtk3-langUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libpango-1_0-0Upgrade libfirefox-glib-2_0-0Upgrade firefox-libffi4Upgrade firefox-gio-branding-upstreamUpgrade firefox-libffi7Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfreebl3-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-glib2-toolsUpgrade mozilla-nss-certs-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade libfirefox-gio-2_0-0Upgrade enigmailUpgrade mozilla-nsprUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libcairo-gobject2Upgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-atk-langUpgrade mozilla-nss-32bitUpgrade mozillafirefox-buildsymbolsUpgrade mozillafirefox-branding-upstreamUpgrade mozilla-nss-certsUpgrade mozillafirefox-branding-sleUpgrade firefox-libcairo2Upgrade MozillaThunderbird-translations-commonUpgrade MozillaFirefoxUpgrade libfirefox-gobject-2_0-0 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub