When a master password is set, it is required to be entered again before stored passwords can be accessed in the 'Saved Logins' dialog. It was found that locally stored passwords can be copied to the clipboard thorough the 'copy password' context menu item without re-entering the master password if the master password had been previously entered in the same session, allowing for potential theft of stored passwords. This vulnerability affects Firefox < 68.0.2 and Firefox ESR < 68.0.2.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade firefox-esrUpgrade librewolfUpgrade firefox | Aug 22, 2024 | Sep 27, 2019 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 27, 2019 |
| Centos_linux | — | Upgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade firefox | Sep 11, 2019 | Sep 10, 2019 |
| Freebsd | — | Upgrade firefoxUpgrade cliqz | Aug 29, 2019 | Aug 28, 2019 |
| Mfsa2019 24 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 68.0.2Upgrade to Mozilla Firefox ESR version 68.0.2 | Aug 15, 2019 | Aug 14, 2019 |
| Oracle_linux | — | Upgrade firefox | Sep 11, 2019 | Aug 14, 2019 |
| Redhat_linux | — | Upgrade firefoxUpgrade firefox-debugsourceUpgrade firefox-debuginfo | Sep 11, 2019 | Sep 10, 2019 |
| Suse | — | Upgrade libfirefox-gmodule-2_0-0Upgrade mozilla-nss-32bitUpgrade firefox-gio-branding-upstreamUpgrade firefox-libcairo-gobject2Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-gdk-pixbuf-query-loadersUpgrade firefox-atk-langUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libffi4Upgrade firefox-gtk3-branding-upstreamUpgrade firefox-gdk-pixbuf-langUpgrade libfreebl3-32bitUpgrade firefox-gtk3-immodule-inuktitutUpgrade mozilla-nss-certsUpgrade mozilla-nss-certs-32bitUpgrade libfirefox-glib-2_0-0Upgrade libfirefox-gio-2_0-0Upgrade mozillafirefox-branding-sleUpgrade firefox-glib2-toolsUpgrade firefox-libpango-1_0-0Upgrade mozillafirefox-branding-upstreamUpgrade libfreebl3Upgrade mozillafirefox-buildsymbolsUpgrade mozilla-nsprUpgrade MozillaFirefoxUpgrade firefox-libffi7Upgrade libfirefox-gobject-2_0-0Upgrade firefox-gdk-pixbuf-thumbnailerUpgrade firefox-gtk3-immodule-thaiUpgrade firefox-gtk3-immodule-multipressUpgrade MozillaFirefox-develUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-amharicUpgrade mozilla-nspr-32bitUpgrade mozilla-nssUpgrade mozilla-nss-toolsUpgrade firefox-libgtk-3-0Upgrade MozillaFirefox-translations-commonUpgrade firefox-gtk3-immodule-ximUpgrade firefox-gtk3-langUpgrade libsoftokn3-32bitUpgrade firefox-libcairo2Upgrade firefox-gtk3-dataUpgrade firefox-gtk3-immodules-tigrignaUpgrade firefox-glib2-langUpgrade mozilla-nspr-develUpgrade firefox-gtk3-toolsUpgrade mozilla-nss-develUpgrade firefox-libharfbuzz0Upgrade libfirefox-gthread-2_0-0Upgrade MozillaFirefox-translations-otherUpgrade libsoftokn3 | Oct 8, 2019 | Aug 16, 2019 |
| Ubuntu | — | Upgrade firefox | Aug 17, 2019 | Aug 16, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub