Download Firefox

Firefox is no longer supported on Windows 8.1 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox is no longer supported on macOS 10.14 and below.

Please download Firefox ESR (Extended Support Release) to use Firefox.

Firefox Privacy Notice

Mozilla Foundation Security Advisory 2019-18

Security vulnerabilities fixed in Firefox 67.0.3 and Firefox ESR 60.7.1

Announced
June 18, 2019
Impact
critical
Products
Firefox, Firefox ESR
Fixed in
  • Firefox 67.0.3
  • Firefox ESR 60.7.1

#CVE-2019-11707: Type confusion in Array.pop

Reporter
Samuel Groß of Google Project Zero, Coinbase Security
Impact
critical
Description

A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw.

References