A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This vulnerability affects Firefox < 68.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Jul 23, 2019 |
| Freebsd | — | Upgrade waterfoxUpgrade linux-thunderbirdUpgrade libxulUpgrade linux-firefoxUpgrade seamonkeyUpgrade thunderbirdUpgrade linux-seamonkeyUpgrade firefox-esrUpgrade firefox | Jul 11, 2019 | Jul 9, 2019 |
| Gentoo Linux | — | Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Aug 16, 2019 | Jul 23, 2019 |
| Mfsa2019 21 | — | Upgrade to Mozilla Firefox version 68.0 | Jul 10, 2019 | Jul 9, 2019 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 68.0 | Sep 11, 2019 | Jul 23, 2019 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jul 23, 2019 |
| Suse | — | Upgrade firefox-libffi4Upgrade libfirefox-glib-2_0-0Upgrade firefox-gtk3-langUpgrade libfirefox-gio-2_0-0Upgrade firefox-libcairo2Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nss-toolsUpgrade firefox-libgtk-3-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-libatk-1_0-0Upgrade mozillafirefox-branding-sledUpgrade mozilla-nssUpgrade mozillafirefox-buildsymbolsUpgrade firefox-gtk3-immodule-amharicUpgrade firefox-glib2-toolsUpgrade mozilla-nss-certs-32bitUpgrade firefox-atk-langUpgrade mozillafirefoxUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-toolsUpgrade firefox-gdk-pixbuf-langUpgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade mozilla-nss-32bitUpgrade mozillafirefox-branding-upstreamUpgrade firefox-libcairo-gobject2Upgrade firefox-libpango-1_0-0Upgrade mozillathunderbird-translations-otherUpgrade enigmailUpgrade firefox-gtk3-immodule-multipressUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-gtk3-dataUpgrade mozillathunderbirdUpgrade libfirefox-gthread-2_0-0Upgrade mozilla-nspr-32bitUpgrade firefox-glib2-langUpgrade libfreebl3Upgrade mozilla-nsprUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-gio-branding-upstreamUpgrade mozilla-nspr-develUpgrade libsoftokn3-32bitUpgrade mozillafirefox-branding-sleUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade MozillaThunderbird-buildsymbolsUpgrade firefox-gtk3-branding-upstreamUpgrade mozillafirefox-develUpgrade libfirefox-gobject-2_0-0Upgrade mozillafirefox-translations-commonUpgrade mozilla-nss-develUpgrade firefox-libffi7Upgrade mozillathunderbird-translations-commonUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozillafirefox-translations-otherUpgrade firefox-gtk3-immodule-thai | Oct 8, 2019 | Jul 9, 2019 |
| Ubuntu | — | Upgrade firefox | Jul 13, 2019 | Jul 9, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub