CVE-2019-11694 | BDVDB-2026-119640 Detail

Description#

A vulnerability exists in the Windows sandbox where an uninitialized value in memory can be leaked to a renderer from a broker when making a call to access an otherwise unavailable file. This results in the potential leaking of information stored at that memory location. *Note: this issue only occurs on Windows. Other operating systems are unaffected.*. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12019-07-23Record published in the CVE List.
2. Version 22024-08-04Most recent update recorded in the CVE List.