CVE-2019-9816
MEDIUM 5.9EPSS 6.2%
A possible vulnerability exists where type confusion can occur when manipulating JavaScript objects in object groups, allowing for the bypassing of security checks within these groups. *Note: this vulnerability has only been demonstrated with UnboxedObjects, which are disabled by default on all supported releases.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.
- Affected
- Mozilla · Thunderbird · Firefox · Firefox ESR
- CVSS v3.0 NVD
- 5.9 MEDIUM
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 4.3 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N - EPSS
- 6.15% chance of exploitation in the next 30 days, 93rd percentile
- Published
- 2019-07-23
- Updated
- 2024-08-04
ExploitDB entries (1)
Security advisories
- https://www.mozilla.org/security/advisories/mfsa2019-13
- https://www.mozilla.org/security/advisories/mfsa2019-14
- https://www.mozilla.org/security/advisories/mfsa2019-15