{"schema_version":"2","view":"grouped","data":[{"id":3658,"cve_ids":["CVE-2019-17026"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-17026","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-17026","aliases":["CVE-2019-17026"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-17026","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-17026","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.","vulnerabilityName":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-17026","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7bce3b7a-1754-4463-b521-c0f7389c3e9c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17026","advisory_id":"7bce3b7a-1754-4463-b521-c0f7389c3e9c","event_types":["advisory"],"published_at":"2026-10-24T21:39:29.332442+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A7bce3b7a-1754-4463-b521-c0f7389c3e9c","group":{"id":"advisory:7bce3b7a-1754-4463-b521-c0f7389c3e9c","revision":1,"primary_event_id":3673,"change":"published","superseded_by":[],"changed":{"id":3673,"cve_ids":["CVE-2019-17026"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-17026","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-17026","aliases":["CVE-2019-17026"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-17026","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-17026","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.","vulnerabilityName":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-17026","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7bce3b7a-1754-4463-b521-c0f7389c3e9c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17026","advisory_id":"7bce3b7a-1754-4463-b521-c0f7389c3e9c","event_types":["advisory"],"published_at":"2026-10-24T21:39:29.332442+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3673"},"members":[{"id":3673,"cve_ids":["CVE-2019-17026"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-17026","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-17026","aliases":["CVE-2019-17026"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-17026","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-17026","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability due to incorrect alias information in the IonMonkey JIT compiler when setting array elements.","vulnerabilityName":"Mozilla Firefox And Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-17026","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:7bce3b7a-1754-4463-b521-c0f7389c3e9c","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-17026","advisory_id":"7bce3b7a-1754-4463-b521-c0f7389c3e9c","event_types":["advisory"],"published_at":"2026-10-24T21:39:29.332442+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3673"}]}},{"id":3657,"cve_ids":["CVE-2020-6820"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6820","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6820","aliases":["CVE-2020-6820"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362"],"cveID":"CVE-2020-6820","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6820","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6820","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eaf531ba-c39a-47be-9d3d-06729ca85bf6","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6820","advisory_id":"eaf531ba-c39a-47be-9d3d-06729ca85bf6","event_types":["advisory"],"published_at":"2026-10-24T21:39:28.736913+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3Aeaf531ba-c39a-47be-9d3d-06729ca85bf6","group":{"id":"advisory:eaf531ba-c39a-47be-9d3d-06729ca85bf6","revision":1,"primary_event_id":3672,"change":"published","superseded_by":[],"changed":{"id":3672,"cve_ids":["CVE-2020-6820"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6820","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6820","aliases":["CVE-2020-6820"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362"],"cveID":"CVE-2020-6820","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6820","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6820","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eaf531ba-c39a-47be-9d3d-06729ca85bf6","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6820","advisory_id":"eaf531ba-c39a-47be-9d3d-06729ca85bf6","event_types":["advisory"],"published_at":"2026-10-24T21:39:28.736913+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3672"},"members":[{"id":3672,"cve_ids":["CVE-2020-6820"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6820","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6820","aliases":["CVE-2020-6820"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362"],"cveID":"CVE-2020-6820","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6820","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when handling a ReadableStream under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6820","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:eaf531ba-c39a-47be-9d3d-06729ca85bf6","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6820","advisory_id":"eaf531ba-c39a-47be-9d3d-06729ca85bf6","event_types":["advisory"],"published_at":"2026-10-24T21:39:28.736913+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3672"}]}},{"id":3654,"cve_ids":["CVE-2020-6819"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6819","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6819","aliases":["CVE-2020-6819"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362","CWE-416"],"cveID":"CVE-2020-6819","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6819","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6819","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16c34312-f7c9-4c00-91e5-1efc36f1b3e2","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6819","advisory_id":"16c34312-f7c9-4c00-91e5-1efc36f1b3e2","event_types":["advisory"],"published_at":"2026-10-24T21:39:28.165048+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/advisories/advisory%3A16c34312-f7c9-4c00-91e5-1efc36f1b3e2","group":{"id":"advisory:16c34312-f7c9-4c00-91e5-1efc36f1b3e2","revision":1,"primary_event_id":3671,"change":"published","superseded_by":[],"changed":{"id":3671,"cve_ids":["CVE-2020-6819"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6819","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6819","aliases":["CVE-2020-6819"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362","CWE-416"],"cveID":"CVE-2020-6819","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6819","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6819","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16c34312-f7c9-4c00-91e5-1efc36f1b3e2","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6819","advisory_id":"16c34312-f7c9-4c00-91e5-1efc36f1b3e2","event_types":["advisory"],"published_at":"2026-10-24T21:39:28.165048+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3671"},"members":[{"id":3671,"cve_ids":["CVE-2020-6819"],"payload":{"kind":"advisory","title":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-6819","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-6819","aliases":["CVE-2020-6819"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-362","CWE-416"],"cveID":"CVE-2020-6819","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-6819","dueDate":"2022-05-03","product":"Firefox and Thunderbird","dateAdded":"2021-11-03","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a race condition vulnerability when running the nsDocShell destructor under certain conditions. The race condition creates a use-after-free vulnerability, causing unspecified impacts.","vulnerabilityName":"Mozilla Firefox And Thunderbird Use-After-Free Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2020-6819","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:16c34312-f7c9-4c00-91e5-1efc36f1b3e2","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-6819","advisory_id":"16c34312-f7c9-4c00-91e5-1efc36f1b3e2","event_types":["advisory"],"published_at":"2026-10-24T21:39:28.165048+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2021-11-03T00:00:00+00:00","detail_url":"/events/3671"}]}},{"id":2669,"cve_ids":["CVE-2013-1690"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","summary":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1690","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1690","aliases":["CVE-2013-1690"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1690","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690","dueDate":"2022-04-18","product":"Firefox and Thunderbird","dateAdded":"2022-03-28","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","vulnerabilityName":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1690","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:818754e8-f351-49eb-a37c-7faebbe53998","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1690","advisory_id":"818754e8-f351-49eb-a37c-7faebbe53998","event_types":["advisory"],"published_at":"2026-10-24T21:22:25.341501+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/advisories/advisory%3A818754e8-f351-49eb-a37c-7faebbe53998","group":{"id":"advisory:818754e8-f351-49eb-a37c-7faebbe53998","revision":1,"primary_event_id":2678,"change":"published","superseded_by":[],"changed":{"id":2678,"cve_ids":["CVE-2013-1690"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","summary":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1690","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1690","aliases":["CVE-2013-1690"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1690","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690","dueDate":"2022-04-18","product":"Firefox and Thunderbird","dateAdded":"2022-03-28","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","vulnerabilityName":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1690","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:818754e8-f351-49eb-a37c-7faebbe53998","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1690","advisory_id":"818754e8-f351-49eb-a37c-7faebbe53998","event_types":["advisory"],"published_at":"2026-10-24T21:22:25.341501+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/events/2678"},"members":[{"id":2678,"cve_ids":["CVE-2013-1690"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","summary":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2013-1690","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2013-1690","aliases":["CVE-2013-1690"],"affected":[],"modified":"2022-03-28T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-119"],"cveID":"CVE-2013-1690","notes":"https://nvd.nist.gov/vuln/detail/CVE-2013-1690","dueDate":"2022-04-18","product":"Firefox and Thunderbird","dateAdded":"2022-03-28","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.","vulnerabilityName":"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2013-1690","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:818754e8-f351-49eb-a37c-7faebbe53998","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2013-1690","advisory_id":"818754e8-f351-49eb-a37c-7faebbe53998","event_types":["advisory"],"published_at":"2026-10-24T21:22:25.341501+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-03-28T00:00:00+00:00","detail_url":"/events/2678"}]}},{"id":2579,"cve_ids":["CVE-2019-11707"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11707","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11707","aliases":["CVE-2019-11707"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-11707","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11707","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.","vulnerabilityName":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11707","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d70c4f5-123b-43f8-b623-6f7f4d79b82d","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11707","advisory_id":"1d70c4f5-123b-43f8-b623-6f7f4d79b82d","event_types":["advisory"],"published_at":"2026-10-24T21:21:28.401729+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/advisories/advisory%3A1d70c4f5-123b-43f8-b623-6f7f4d79b82d","group":{"id":"advisory:1d70c4f5-123b-43f8-b623-6f7f4d79b82d","revision":1,"primary_event_id":2589,"change":"published","superseded_by":[],"changed":{"id":2589,"cve_ids":["CVE-2019-11707"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11707","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11707","aliases":["CVE-2019-11707"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-11707","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11707","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.","vulnerabilityName":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11707","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d70c4f5-123b-43f8-b623-6f7f4d79b82d","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11707","advisory_id":"1d70c4f5-123b-43f8-b623-6f7f4d79b82d","event_types":["advisory"],"published_at":"2026-10-24T21:21:28.401729+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2589"},"members":[{"id":2589,"cve_ids":["CVE-2019-11707"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11707","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11707","aliases":["CVE-2019-11707"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-843"],"cveID":"CVE-2019-11707","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11707","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash.","vulnerabilityName":"Mozilla Firefox and Thunderbird Type Confusion Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11707","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:1d70c4f5-123b-43f8-b623-6f7f4d79b82d","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11707","advisory_id":"1d70c4f5-123b-43f8-b623-6f7f4d79b82d","event_types":["advisory"],"published_at":"2026-10-24T21:21:28.401729+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2589"}]}},{"id":2577,"cve_ids":["CVE-2019-11708"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11708","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11708","aliases":["CVE-2019-11708"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2019-11708","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11708","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.","vulnerabilityName":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11708","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b387e83e-73a3-497f-89f0-f8f2d4f780e0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11708","advisory_id":"b387e83e-73a3-497f-89f0-f8f2d4f780e0","event_types":["advisory"],"published_at":"2026-10-24T21:21:26.403448+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/advisories/advisory%3Ab387e83e-73a3-497f-89f0-f8f2d4f780e0","group":{"id":"advisory:b387e83e-73a3-497f-89f0-f8f2d4f780e0","revision":1,"primary_event_id":2587,"change":"published","superseded_by":[],"changed":{"id":2587,"cve_ids":["CVE-2019-11708"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11708","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11708","aliases":["CVE-2019-11708"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2019-11708","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11708","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.","vulnerabilityName":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11708","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b387e83e-73a3-497f-89f0-f8f2d4f780e0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11708","advisory_id":"b387e83e-73a3-497f-89f0-f8f2d4f780e0","event_types":["advisory"],"published_at":"2026-10-24T21:21:26.403448+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2587"},"members":[{"id":2587,"cve_ids":["CVE-2019-11708"],"payload":{"kind":"advisory","title":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","summary":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-11708","products":[{"name":{"value":"Firefox and Thunderbird","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-11708","aliases":["CVE-2019-11708"],"affected":[],"modified":"2022-05-23T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-20"],"cveID":"CVE-2019-11708","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-11708","dueDate":"2022-06-13","product":"Firefox and Thunderbird","dateAdded":"2022-05-23","vendorProject":"Mozilla","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Mozilla Firefox and Thunderbird contain a sandbox escape vulnerability that could result in remote code execution.","vulnerabilityName":"Mozilla Firefox and Thunderbird Sandbox Escape Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2019-11708","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:b387e83e-73a3-497f-89f0-f8f2d4f780e0","priority":{"reasons":["known_exploited"],"severity":"unknown","linked_cves":[],"fix_available":false,"known_exploited":true,"publisher_severity":"unknown"},"revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-11708","advisory_id":"b387e83e-73a3-497f-89f0-f8f2d4f780e0","event_types":["advisory"],"published_at":"2026-10-24T21:21:26.403448+00:00","technologies":["core-kev","firefox-and-thunderbird"],"context_update":false,"extraction_method":"structured","source_published_at":"2022-05-23T00:00:00+00:00","detail_url":"/events/2587"}]}}],"next_after":3658,"next_before":2577}