CVE Watch—

CVE-2019-11707

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

CVSS

—

No CVSS

EPSS

37.7%

p99

KEV

YES

May 23, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

37.7%EPSS · 30 days37.7%

2026-09-182026-10-15

KEV catalog record

Product

Mozilla / Firefox and Thunderbird

Vulnerability

Mozilla Firefox and Thunderbird Type Confusion Vulnerability

Added to KEV

May 23, 2022

Remediate by

Jun 13, 2022

Known ransomware use

Summary description

Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.

Required action

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2019-11707

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2013-1690—

99.3%

KEV—80Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability—CVE-2019-11708—

99.0%

KEV—80Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability—CVE-2019-17026—

98.8%

KEV—80Mozilla Firefox And Thunderbird Type Confusion Vulnerability—CVE-2020-6820—

94.1%

KEV—78Mozilla Firefox And Thunderbird Use-After-Free Vulnerability—CVE-2020-6819—

87.3%

KEV—76Mozilla Firefox And Thunderbird Use-After-Free Vulnerability—