CVE-2019-11716: Input Validation
Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depends on enumerating and freezing access to the window object may miss this, allowing their sandboxes to be bypassed.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2019-11716?
The severity of CVE-2019-11716 is high, with a severity value of 8.3.
Which software is affected by CVE-2019-11716?
CVE-2019-11716 affects Mozilla Thunderbird 68, Mozilla Firefox 68, and Mozilla Firefox 68.0.
How can I fix CVE-2019-11716?
To fix CVE-2019-11716, update Mozilla Thunderbird to version 68 or later, or update Mozilla Firefox to version 68.0 or later.
What is the CWE of CVE-2019-11716?
The CWE of CVE-2019-11716 is CWE-20.
Where can I find more information about CVE-2019-11716?
More information about CVE-2019-11716 can be found in the following references: [link1], [link2], [link3].