{
  "cveId": "CVE-2019-11748",
  "url": "https://patchblox.com/security/cve/CVE-2019-11748",
  "summary": "CVE-2019-11748 is fixed in 4 products on 2 platforms, first by firefox 69.0\u002Bbuild2-0ubuntu0.18.04.1, released September 3, 2019. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "Firefox ESR: WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera\u2026",
  "description": "WebRTC in Firefox will honor persisted permissions given to sites for access to microphone and camera resources even when in a third-party context. In light of recent high profile vulnerabilities in other software, a decision was made to no longer persist these permissions. This avoids the possibility of trusted WebRTC resources being invisibly embedded in web content and abusing permissions previously given by users. Users will now be prompted for permissions on each use. This vulnerability affects Firefox \u003C 69 and Firefox ESR \u003C 68.1.",
  "published": "2019-09-03T17:00:00Z",
  "severity": "Important",
  "cvss": 6.5,
  "epss": 0.01031,
  "epssPercentile": 0.63943,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2019-11748",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "78.0esr",
      "fix": "Mozilla Firefox ESR (en-US) 78.0esr",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-78.0esr",
      "released": "2020-06-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "RHEL 8",
      "fixedVersion": "0:68.1.0-1.el8_0",
      "fix": "RHSA-2019:2663",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-2663",
      "released": "2019-09-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-69.0-build2-0ubuntu0.18.04.1",
      "released": "2019-09-03T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "ol 8",
      "fixedVersion": "0:68.1.0-1.0.1.el8_0",
      "fix": "ELSA-2019-2663",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-2663",
      "released": "2019-09-06T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-69.0-build2-0ubuntu0.18.04.1",
      "released": "2019-09-03T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 69.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-69.0-build2-0ubuntu0.18.04.1",
      "released": "2019-09-03T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}