patch releases for Firefox 67.0.3 and 60.7.1, in which a critical (CVE-2019-11707), allowing a crash of the browser when executing malicious JavaScript code. The vulnerability arises from a problem with type handling in the Array.pop method. Access to detailed information is currently . It is also unclear whether the issue is limited to the reported crash or could potentially be exploited to execute malicious code.
Note: According to the Cybersecurity and Infrastructure Security Agency (CISA), the vulnerability allows an attacker to gain control over the system and execute code with browser privileges. Moreover, there have already been reports of attacks utilizing this vulnerability. All users are strongly advised to urgently install the released update.
Source: opennet.ru
