CVE-2019-11707 — Mozilla Firefox and Thunderbird Type Confusion Vulnerability

CISA KEVExploited: confirmedMozilla

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

Vulnerability details

Affected productsFirefox and Thunderbird
KEV remediation due2022-06-13