Lucene search
HistoryMar 02, 2020 - 5:15 a.m.
CVE-2019-17026
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.526 Medium
EPSS
Percentile
97.6%
Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 68.4.1, Thunderbird < 68.4.1, and Firefox < 72.0.1.
Affected configurations
Node
mozillafirefoxRange<72.0.1
ORmozillafirefox_esrRange<68.4.1
ORmozillathunderbirdRange<68.4.1
Node
canonicalubuntu_linuxMatch16.04esm
Related
cvelist
cvelist
CVE-2019-17026
2020-03-02 04:05:03
openvas
openvas
Mozilla Firefox ESR Security Advisories (MFSA2020-03, MFSA2020-03) - Windows
2020-01-09 00:00:00
Mozilla Firefox Security Advisory (MFSA2020-03) - Linux
2021-11-08 00:00:00
Debian: Security Advisory (DLA-2093-1)
2020-02-02 00:00:00
debian
debian
[SECURITY] [DLA 2093-1] firefox-esr security update
2020-02-01 04:15:49
[SECURITY] [DLA 2071-1] thunderbird security update
2020-01-20 11:40:56
[SECURITY] [DSA 4600-1] firefox-esr security update
2020-01-09 09:21:23
nessus
nessus
Debian DLA-2093-1 : firefox-esr security update
2020-02-03 00:00:00
Mozilla Firefox ESR < 68.4.1
2020-01-08 00:00:00
Mozilla Firefox < 72.0.1
2020-01-08 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox IonMonkey JIT Compiler Type Confusion (CVE-2019-17026)
2022-02-21 00:00:00
osv
osv
firefox-esr - security update
2020-02-01 00:00:00
thunderbird - security update
2020-01-17 00:00:00
thunderbird - security update
2020-01-20 00:00:00
cisa
cisa
Mozilla Patches Critical Vulnerability
2020-01-08 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-01-18 01:01:54
cisa_kev
cisa_kev
Mozilla Firefox And Thunderbird Type Confusion Vulnerability
2021-11-03 00:00:00
archlinux
archlinux
[ASA-202001-3] firefox: arbitrary code execution
2020-01-10 00:00:00
[ASA-202001-4] thunderbird: multiple issues
2020-01-14 00:00:00
symantec
symantec
debiancve
debiancve
CVE-2019-17026
2020-03-02 05:15:12
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 72.0.1 and Firefox ESR 68.4.1 — Mozilla
2020-01-08 00:00:00
Security Vulnerabilities fixed in Thunderbird 68.4.1 — Mozilla
2020-01-10 00:00:00
redhatcve
redhatcve
CVE-2019-17026
2020-01-09 05:09:01
prion
prion
Type confusion
2020-03-02 05:15:00
avleonov
avleonov
0day RCE in Firefox
2020-01-12 02:06:26
thn
thn
Critical Firefox 0-Day Under Active Attacks – Update Your Browser Now!
2020-01-09 10:34:00
kaspersky
kaspersky
KLA11630 Type confusion vulnerability in Mozilla Firefox
2020-01-08 00:00:00
KLA11631 Type confusion vulnerability in Mozilla Firefox ESR
2020-01-08 00:00:00
KLA11635 Multiple vulnerabilities in Mozilla Thunderbird
2020-01-10 00:00:00
ubuntucve
ubuntucve
CVE-2019-17026
2020-01-09 00:00:00
alpinelinux
alpinelinux
CVE-2019-17026
2020-03-02 05:15:12
cve
cve
CVE-2019-17026
2020-03-02 05:15:12
attackerkb
attackerkb
CVE-2019-17026
2020-03-02 00:00:00
packetstorm
packetstorm
Firefox 72 IonMonkey JIT Type Confusion
2021-05-13 00:00:00
Mozilla Firefox 67 Array.pop JIT Type Confusion
2022-02-02 00:00:00
zdt
zdt
Mozilla Firefox 72 IonMonkey - JIT Type Confusion Exploit
2021-05-13 00:00:00
Mozilla Firefox 67 - Array.pop JIT Type Confusion Exploit
2022-02-02 00:00:00
exploitdb
exploitdb
Firefox 72 IonMonkey - JIT Type Confusion
2021-05-13 00:00:00
Mozilla Firefox 67 - Array.pop JIT Type Confusion
2022-02-02 00:00:00
githubexploit
githubexploit
Exploit for Type Confusion in Mozilla Firefox
2020-08-27 19:32:07
talosblog
talosblog
Threat Source newsletter (Jan. 9, 2019)
2020-01-10 07:13:41
redhat
redhat
(RHSA-2020:0120) Important: thunderbird security update
2020-01-16 10:45:20
(RHSA-2020:0127) Important: thunderbird security update
2020-01-16 12:26:13
(RHSA-2020:0111) Critical: firefox security update
2020-01-14 18:11:55
oraclelinux
oraclelinux
thunderbird security update
2020-07-07 00:00:00
firefox security update
2020-01-13 00:00:00
thunderbird security update
2020-01-18 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2020-01-12 02:52:04
Updated firefox packages fix security vulnerability
2020-01-09 23:11:02
centos
centos
thunderbird security update
2020-01-18 14:40:44
firefox security update
2020-01-15 14:45:49
firefox security update
2020-01-14 17:25:32
threatpost
threatpost
Mozilla Updates Firefox Browser: Zero-Day Bug Patched, Fingerprinting Nixed
2020-01-08 18:04:42
amazon
amazon
Important: thunderbird
2020-02-10 23:43:00
suse
suse
Security update for MozillaThunderbird (important)
2020-01-22 00:00:00
Security update for MozillaFirefox (important)
2020-01-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package thunderbird version 68.4.1-alt1
2020-01-11 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2020-01-11 00:19:13
ubuntu
ubuntu
Firefox vulnerabilities
2020-01-09 00:00:00
Thunderbird vulnerabilities
2020-01-16 00:00:00
Thunderbird vulnerabilities
2020-04-21 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2023-3.0-0649
2023-09-14 00:00:00
securelist
securelist
IT threat evolution Q1 2020. Statistics
2020-05-20 10:00:43
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2020-03-12 00:00:00
qualysblog
qualysblog
Managing CISA Known Exploited Vulnerabilities with Qualys VMDR
2022-02-23 05:39:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
8 High
AI Score
Confidence
High
0.526 Medium
EPSS
Percentile
97.6%
Related for NVD:CVE-2019-17026