Lucene search
Veracode Vulnerability DatabaseVERACODE:27167HistorySep 21, 2020 - 6:39 a.m.
Sandbox Bypass
2020-09-2106:39:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
0.004 Low
EPSS
Percentile
72.9%
firefox is vulnerable to sandbox bypass. Until explicitly accessed by script, window.global.This is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames (window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox:bionic | eq | 59.0.2+build1 | |
| firefox:xenial | eq | 45.0.2+build1 | |
| firefox:bionic | eq | 59.0.2+build1 | |
| firefox:xenial | eq | 45.0.2+build1 |
Related
cve
cve
CVE-2019-11716
2019-07-23 14:15:15
nvd
nvd
CVE-2019-11716
2019-07-23 14:15:15
cvelist
cvelist
CVE-2019-11716
2019-07-23 13:18:19
prion
prion
Design/Logic Flaw
2019-07-23 14:15:00
debiancve
debiancve
CVE-2019-11716
2019-07-23 14:15:15
redhatcve
redhatcve
CVE-2019-11716
2022-01-13 06:55:19
ubuntucve
ubuntucve
CVE-2019-11716
2019-07-11 00:00:00
kaspersky
kaspersky
KLA11549 Multiple vulnerabilities in Mozilla Thunderbird
2019-08-27 00:00:00
KLA11515 Multiple vulnerabilities in Mozilla Firefox
2019-07-09 00:00:00
nessus
nessus
Mozilla Thunderbird < 68.0
2019-09-17 00:00:00
Mozilla Thunderbird < 68.0
2019-09-17 00:00:00
Ubuntu 16.04 LTS / 18.04 LTS : Firefox regressions (USN-4054-2)
2019-07-26 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2019-09-12 22:09:52
Updated firefox packages fix security vulnerability
2019-07-21 21:17:27
ibm
ibm
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2019-21) - Linux
2021-11-08 00:00:00
Mageia: Security Advisory (MGASA-2019-0272)
2022-01-28 00:00:00
Mozilla Firefox Security Advisories (MFSA2019-21, MFSA2019-22) - Windows
2019-07-11 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2019-07-09 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Thunderbird 68 — Mozilla
2019-08-27 00:00:00
Security vulnerabilities fixed in Firefox 68 — Mozilla
2019-07-09 00:00:00
archlinux
archlinux
[ASA-201907-4] firefox: multiple issues
2019-07-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2019-07-12 00:00:00
Firefox regressions
2019-07-25 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2019-08-15 00:00:00
suse
suse
Security update for MozillaFirefox (important)
2019-10-05 00:00:00
Security update for MozillaThunderbird (important)
2019-10-04 00:00:00
Security update for MozillaFirefox (important)
2019-10-06 00:00:00