Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade linux-firefoxUpgrade waterfoxUpgrade linux-thunderbirdUpgrade firefox-esrUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade libxulUpgrade firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-gio-branding-upstreamUpgrade firefox-gtk3-toolsUpgrade mozilla-nss-certs-32bitUpgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-multipressUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-glib2-langUpgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade firefox-libcairo-gobject2Upgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-atk-langUpgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gobject-2_0-0Upgrade mozilla-nspr-32bitUpgrade libfreebl3Upgrade mozilla-nsprUpgrade firefox-libpango-1_0-0Upgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade MozillaFirefox-develUpgrade mozilla-nssUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-libffi7Upgrade mozilla-nss-develUpgrade firefox-libgtk-3-0Upgrade firefox-glib2-toolsUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbirdUpgrade MozillaThunderbird-translations-otherUpgrade libsoftokn3Upgrade firefox-gtk3-dataUpgrade firefox-libffi4Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefoxUpgrade mozilla-nspr-develUpgrade mozillafirefox-branding-sleUpgrade firefox-gtk3-immodule-ximUpgrade MozillaFirefox-translations-commonUpgrade libsoftokn3-32bitUpgrade enigmailUpgrade firefox-gdk-pixbuf-langUpgrade libfreebl3-32bitUpgrade firefox-gtk3-langUpgrade firefox-libatk-1_0-0Upgrade firefox-libcairo2Upgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-vietnameseUpgrade libfirefox-glib-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade mozilla-nss-tools | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub