{"schema_version":"1","data":[{"id":3673,"advisory_id":"7bce3b7a-1754-4463-b521-c0f7389c3e9c","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17026","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:29.332442+00:00","extraction_method":"structured","technologies":["core-kev","firefox-and-thunderbird"],"cve_ids":["CVE-2019-17026"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-17026","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-17026","aliases":["CVE-2019-17026"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-17026","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-17026","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.","vulnerabilityName":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-17026","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3672,"advisory_id":"eaf531ba-c39a-47be-9d3d-06729ca85bf6","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6820","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:28.736913+00:00","extraction_method":"structured","technologies":["core-kev","firefox-and-thunderbird"],"cve_ids":["CVE-2020-6820"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6820","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6820","aliases":["CVE-2020-6820"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362"],"cveID":"CVE-2020-6820","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6820","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6820","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3671,"advisory_id":"16c34312-f7c9-4c00-91e5-1efc36f1b3e2","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6819","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:39:28.165048+00:00","extraction_method":"structured","technologies":["core-kev","firefox-and-thunderbird"],"cve_ids":["CVE-2020-6819"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6819","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6819","aliases":["CVE-2020-6819"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362","CWE-416"],"cveID":"CVE-2020-6819","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6819","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6819","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2678,"advisory_id":"818754e8-f351-49eb-a37c-7faebbe53998","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1690","source_published_at":"2022-03-28T00:00:00+00:00","published_at":"2026-10-24T21:22:25.341501+00:00","extraction_method":"structured","technologies":["core-kev","firefox-and-thunderbird"],"cve_ids":["CVE-2013-1690"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","summary":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1690","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1690","aliases":["CVE-2013-1690"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1690","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690","dueDate":"2022-04-18","product":"Firefox and Thunderbird","dateAdded":"2022-03-28","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","vulnerabilityName":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1690","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2589,"advisory_id":"1d70c4f5-123b-43f8-b623-6f7f4d79b82d","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11707","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:21:28.401729+00:00","extraction_method":"structured","technologies":["core-kev","firefox-and-thunderbird"],"cve_ids":["CVE-2019-11707"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11707","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11707","aliases":["CVE-2019-11707"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-11707","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11707","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.","vulnerabilityName":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11707","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2587,"advisory_id":"b387e83e-73a3-497f-89f0-f8f2d4f780e0","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11708","source_published_at":"2022-05-23T00:00:00+00:00","published_at":"2026-10-24T21:21:26.403448+00:00","extraction_method":"structured","technologies":["core-kev","firefox-and-thunderbird"],"cve_ids":["CVE-2019-11708"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11708","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11708","aliases":["CVE-2019-11708"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2019-11708","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11708","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.","vulnerabilityName":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11708","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3673,"next_before":2587}