Beveiligingsadvies

CVE-2019-17026

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-02 04:05:03
Laatst bijgewerkt 2025-10-21 23:35:50
Toegewezen door mozilla
CVSS-score 8.8
Status PUBLISHED

Beschrijving

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.