CVE-2019-17011: Race Condition
Last updated 25 August 2025
Other sources
Under certain conditions, when retrieving a document from a DocShell in the antitracking code, a race condition could cause a use-after-free condition and a potentially exploitable crash.
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2019-17011.
What software is affected by this vulnerability?
This vulnerability affects Thunderbird < 68.3, Firefox ESR < 68.3, and Firefox < 71.
What is the severity of CVE-2019-17011?
The severity of CVE-2019-17011 is high (7.5).
How can I fix the vulnerability CVE-2019-17011?
To fix the vulnerability CVE-2019-17011, update Thunderbird to version 68.3 or newer, or update Firefox ESR to version 68.3 or newer, or update Firefox to version 71 or newer.
Where can I find more information about CVE-2019-17011?
You can find more information about CVE-2019-17011 on the Mozilla website.