CVE-2019-25136: Critical severity firefox vulnerability
A compromised child process could have injected XBL Bindings into privileged CSS rules, resulting in arbitrary code execution and a sandbox escape.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2019-25136?
CVE-2019-25136 is a vulnerability where a compromised child process can inject XBL Bindings into privileged CSS rules, allowing arbitrary code execution and a sandbox escape.
Which software is affected by CVE-2019-25136?
Mozilla Firefox versions up to but not including 70 are affected by CVE-2019-25136.
What is the severity of CVE-2019-25136?
CVE-2019-25136 has a severity rating of high (7 out of 10).
How can I fix CVE-2019-25136?
Updating Mozilla Firefox to version 70 or higher will fix CVE-2019-25136.
Where can I find more information about CVE-2019-25136?
More information about CVE-2019-25136 can be found at the following references: [Mozilla Bugzilla](https://bugzilla.mozilla.org/show_bug.cgi?id=1530709), [Mozilla Security Advisories](https://www.mozilla.org/en-US/security/advisories/mfsa2019-34/).