{
  "cveId": "CVE-2019-11697",
  "url": "https://patchblox.com/security/cve/CVE-2019-11697",
  "summary": "CVE-2019-11697 is fixed in 4 products on 1 platform, first by firefox 67.0\u002Bbuild2-0ubuntu0.18.04.1, released May 20, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "firefox: If the ALT and \u0022a\u0022 keys are pressed when users receive an extension installation prompt, the extension will be instal...",
  "description": "If the ALT and \u0022a\u0022 keys are pressed when users receive an extension installation prompt, the extension will be installed without the install prompt delay that keeps the prompt visible in order for users to accept or decline the installation. A malicious web page could use this with spoofing on the page to trick users into installing a malicious extension. This vulnerability affects Firefox \u0026lt; 67.",
  "published": "2019-05-20T17:00:00Z",
  "severity": "Medium",
  "epss": 0.00846,
  "epssPercentile": 0.58295,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-globalmenu",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-globalmenu 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-globalmenu-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-testsuite",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-testsuite 67.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-testsuite-67.0-build2-0ubuntu0.18.04.1",
      "released": "2019-05-20T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}