Non notée
CVE-2019-11761 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned…
Description
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Firefox | Versions non publiées | |
| Thunderbird | Versions non publiées | |
| Firefox ESR | Versions non publiées |
Autres CVE de Firefox
Les 2221 CVE de Firefox →
CVE-2026-120572
Incorrect boundary conditions in the Layout: Block and Inline component
8.8
Élevée
CVE-2026-118027
Frame poisoning in the Layout component
9.1
Critique
CVE-2026-118026
Invalid pointer in the JavaScript: GC component
8.8
Élevée
CVE-2026-118024
Use-after-free in the Graphics: Text component
8.8
Élevée