{
  "cveId": "CVE-2019-11764",
  "url": "https://patchblox.com/security/cve/CVE-2019-11764",
  "summary": "CVE-2019-11764 is fixed in 10 products on 2 platforms, first by thunderbird 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1, released October 22, 2019. It is not reported as exploited. Patch Radar priority: Urgent.",
  "title": "Firefox ESR: Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox\u2026",
  "description": "Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could be exploited to run arbitrary code. This vulnerability affects Firefox \u003C 70, Thunderbird \u003C 68.2, and Firefox ESR \u003C 68.2.",
  "published": "2019-10-22T17:00:00Z",
  "severity": "Critical",
  "cvss": 8.8,
  "epss": 0.01472,
  "epssPercentile": 0.73954,
  "priority": "Urgent",
  "priorityTier": 2,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2019-11764",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Mozilla Firefox ESR (en-US)",
      "fixedVersion": "78.0esr",
      "fix": "Mozilla Firefox ESR (en-US) 78.0esr",
      "url": "https://patchblox.com/security/fix/windows-app/mozilla.firefox.esr-78.0esr",
      "released": "2020-06-25T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "RHEL 8",
      "fixedVersion": "0:68.2.0-2.el8_0",
      "fix": "RHSA-2019:3196",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3196",
      "released": "2019-10-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "70.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox 70.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-70.0-build2-0ubuntu0.18.04.1",
      "released": "2020-07-09T08:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "70.0\u002Bbuild2-0ubuntu1",
      "fix": "firefox 70.0\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-70.0-build2-0ubuntu1",
      "released": "2020-07-09T08:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox",
      "release": "ol 8",
      "fixedVersion": "0:68.2.0-2.0.1.el8_0",
      "fix": "ELSA-2019-3196",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-3196",
      "released": "2019-10-24T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "70.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-geckodriver 70.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-geckodriver-70.0-build2-0ubuntu0.18.04.1",
      "released": "2020-07-09T08:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-geckodriver",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "70.0\u002Bbuild2-0ubuntu1",
      "fix": "firefox-geckodriver 70.0\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-geckodriver-70.0-build2-0ubuntu1",
      "released": "2020-07-09T08:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "70.0\u002Bbuild2-0ubuntu0.18.04.1",
      "fix": "firefox-mozsymbols 70.0\u002Bbuild2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-firefox-mozsymbols-70.0-build2-0ubuntu0.18.04.1",
      "released": "2020-07-09T08:15:00Z"
    },
    {
      "platform": "linux",
      "product": "firefox-mozsymbols",
      "release": "Ubuntu 20.04 LTS (focal)",
      "fixedVersion": "70.0\u002Bbuild2-0ubuntu1",
      "fix": "firefox-mozsymbols 70.0\u002Bbuild2-0ubuntu1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-focal-firefox-mozsymbols-70.0-build2-0ubuntu1",
      "released": "2020-07-09T08:15:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "RHEL 8",
      "fixedVersion": "0:68.2.0-1.el8_0",
      "fix": "RHSA-2019:3237",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2019-3237",
      "released": "2019-10-29T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-1-68.2.1-build1-0ubuntu0.18.04.1",
      "released": "2019-10-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird",
      "release": "ol 8",
      "fixedVersion": "0:68.2.0-1.0.1.el8_0",
      "fix": "ELSA-2019-3237",
      "url": "https://patchblox.com/security/fix/linux/elsa-2019-3237",
      "released": "2019-10-30T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-gnome-support",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird-gnome-support 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-gnome-support-1-68.2.1-build1-0ubuntu0.18.04.1",
      "released": "2019-10-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "thunderbird-mozsymbols",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "thunderbird-mozsymbols 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-thunderbird-mozsymbols-1-68.2.1-build1-0ubuntu0.18.04.1",
      "released": "2019-10-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-calendar-timezones",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "xul-ext-calendar-timezones 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-calendar-timezones-1-68.2.1-build1-0ubuntu0.18.04.1",
      "released": "2019-10-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-gdata-provider",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "xul-ext-gdata-provider 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-gdata-provider-1-68.2.1-build1-0ubuntu0.18.04.1",
      "released": "2019-10-22T17:00:00Z"
    },
    {
      "platform": "linux",
      "product": "xul-ext-lightning",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "fix": "xul-ext-lightning 1:68.2.1\u002Bbuild1-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-xul-ext-lightning-1-68.2.1-build1-0ubuntu0.18.04.1",
      "released": "2019-10-22T17:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}