CVE-2019-11707

firefox: ELSA-2019-1696: firefox security update (CRITICAL)

CVE-2019-11707 is fixed in 5 products on 1 platform, first by firefox 67.0.3+build1-0ubuntu0.18.04.1, released June 18, 2019. It is being exploited: CISA added it to the Known Exploited Vulnerabilities catalog on May 23, 2022. Patch Radar priority: Patch now.

Patch nowCISA KEV
CVSS
8.8
CRITICAL
Exploitation
Exploited
Listed by CISA
CISA KEV
May 23, 2022
Federal due date Jun 13, 2022
EPSS
0.3795
98th percentile

ELSA-2019-1696: firefox security update (CRITICAL)

Where it's fixed

ProductFixed inFixReleased
Linux
firefox · RHEL 8 0:60.7.2-3.el8_0 RHSA-2019:1696 Jul 8, 2019
firefox · Ubuntu 18.04.6 LTS (bionic) 67.0.3+build1-0ubuntu0.18.04.1 firefox 67.0.3+build1-0ubuntu0.18.04.1 Jun 18, 2019
firefox · ol 8 0:60.7.2-3.0.2.el8_0 ELSA-2019-1696 Jul 30, 2019
firefox-globalmenu · Ubuntu 18.04.6 LTS (bionic) 67.0.3+build1-0ubuntu0.18.04.1 firefox-globalmenu 67.0.3+build1-0ubuntu0.18.04.1 Jun 18, 2019
firefox-mozsymbols · Ubuntu 18.04.6 LTS (bionic) 67.0.3+build1-0ubuntu0.18.04.1 firefox-mozsymbols 67.0.3+build1-0ubuntu0.18.04.1 Jun 18, 2019
firefox-testsuite · Ubuntu 18.04.6 LTS (bionic) 67.0.3+build1-0ubuntu0.18.04.1 firefox-testsuite 67.0.3+build1-0ubuntu0.18.04.1 Jun 18, 2019
thunderbird · RHEL 8 0:60.7.2-2.el8_0 RHSA-2019:1623 Jun 27, 2019
thunderbird · ol 8 0:60.7.2-2.0.1.el8_0 ELSA-2019-1623 Jul 30, 2019

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.