Some unicode characters are incorrectly treated as whitespace during the parsing of web content instead of triggering parsing errors. This allows malicious code to then be processed, evading cross-site scripting (XSS) filtering. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 6.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade thunderbirdUpgrade seamonkeyUpgrade linux-seamonkeyUpgrade libxulUpgrade linux-thunderbirdUpgrade linux-firefoxUpgrade firefox-esrUpgrade waterfox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade libsoftokn3Upgrade libfirefox-gthread-2_0-0Upgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libatk-1_0-0Upgrade MozillaThunderbird-translations-commonUpgrade firefox-libffi4Upgrade mozilla-nss-toolsUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-gtk3-immodule-ximUpgrade enigmailUpgrade libfirefox-glib-2_0-0Upgrade MozillaThunderbirdUpgrade libfreebl3-32bitUpgrade mozilla-nspr-develUpgrade mozillafirefox-branding-sleUpgrade MozillaFirefoxUpgrade MozillaThunderbird-translations-otherUpgrade mozillafirefox-buildsymbolsUpgrade MozillaFirefox-translations-commonUpgrade firefox-gdk-pixbuf-langUpgrade firefox-gtk3-dataUpgrade firefox-libcairo2Upgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-otherUpgrade libsoftokn3-32bitUpgrade firefox-gtk3-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade mozilla-nspr-32bitUpgrade mozilla-nsprUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade mozilla-nss-develUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade mozilla-nss-32bitUpgrade firefox-libffi7Upgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libpango-1_0-0Upgrade firefox-libcairo-gobject2Upgrade mozilla-nss-certsUpgrade firefox-atk-langUpgrade MozillaFirefox-develUpgrade firefox-glib2-toolsUpgrade firefox-libgtk-3-0Upgrade mozilla-nss-certs-32bitUpgrade libfirefox-gio-2_0-0Upgrade firefox-gtk3-branding-upstreamUpgrade mozilla-nssUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gtk3-toolsUpgrade firefox-libharfbuzz0Upgrade firefox-gio-branding-upstreamUpgrade firefox-glib2-langUpgrade MozillaThunderbird-buildsymbolsUpgrade MozillaFirefox-branding-SLEDUpgrade libfirefox-gobject-2_0-0Upgrade libfreebl3 | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub