vulnerability

MFSA2019-07 Firefox: Security vulnerabilities fixed in Firefox 66 (CVE-2019-9808)

Severity
5
CVSS
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
Published
Mar 19, 2019
Added
Mar 20, 2019
Modified
Aug 11, 2025

Description

If WebRTC permission is requested from documents with data: or blob: URLs, the permission notifications do not properly display the originating domain. The notification states "Unknown origin" as the requestee, leading to user confusion about which site is asking for this permission. This vulnerability affects Firefox < 66.

Solution

mozilla-firefox-upgrade-66_0
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.