Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability
Mozilla — Firefox and Thunderbird
- Added to KEV catalog
- 23 May 2022
- Federal remediation due date
- 13 June 2022
- Weakness classification (CWE)
- CWE-20
CISA Description
Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.
Required action
Apply updates per vendor instructions.
Notes
https://nvd.nist.gov/vuln/detail/CVE-2019-11708
More Mozilla Vulnerabilities
Mozilla Multiple Products Remote Code Execution Vulnerability
Mozilla Firefox Use-After-Free Vulnerability
Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability
Mozilla Firefox Security Feature Bypass Vulnerability
Mozilla Firefox and Thunderbird Type Confusion Vulnerability
Is this vulnerability present in your environment?
CRS delivers independent VAPT assessments that identify exactly which known-exploited vulnerabilities exist in your network, applications, and infrastructure.
Explore VAPT Services