Critical 2 exploited CVEs ELSA-2019-1603 2 CVEs

Critical: firefox security update (Oracle Linux 7)

Published Jun 26, 2019 · Updated Jun 26, 2019

Ecosystem: Oracle Linux

Summary

[60.7.2-1.0.1]
- Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

[60.7.2-1]
- Update to 60.7.2 ESR

[60.7.1-1]
- Updated to 60.7.1 ESR

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 7	firefox	0:60.7.2-1.0.1.el7_6

Vulnerabilities 2

Critical 10.0

CVE-2019-11708 Exploited Public exploit EPSS 56%

Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can resul…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 23, 2019
KEV May 23, 2022
High 8.8

CVE-2019-11707 Exploited Public exploit EPSS 38%

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allo…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jul 23, 2019
KEV May 23, 2022