Not rated
CVE-2019-11761 By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned…
Description
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned into content. Impact from exposing this object appears to be minimal, however it was a bypass of existing defense in depth mechanisms. This vulnerability affects Firefox < 70, Thunderbird < 68.2, and Firefox ESR < 68.2.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Firefox | Versions not published | |
| Thunderbird | Versions not published | |
| Firefox ESR | Versions not published |
Other CVEs of Firefox
The 2221 CVEs of Firefox →
CVE-2026-120572
Incorrect boundary conditions in the Layout: Block and Inline component
8.8
High
CVE-2026-118027
Frame poisoning in the Layout component
9.1
Critical
CVE-2026-118024
Use-after-free in the Graphics: Text component
8.8
High
CVE-2026-118026
Invalid pointer in the JavaScript: GC component
8.8
High