Every CVE Search/ Get API key

CVE-2019-9818

A race condition is present in the crash generation server used to generate data for the crash...

8.3 HighFix available

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.95%Down 9.8 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 8.3

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Record
CVE-2019-9818
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.0
5.1 MediumAV:N/AC:H/Au:N/C:P/I:P/A:P
Weakness
CWE-362, CWE-416
Updated
2026-11-02
CVE List No score

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Record
CVE-2019-9818
Updated
2026-11-02
EUVDEUVD-2019-19180 No score

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Record
EUVD-2019-19180
Updated
2026-11-03
GitHub AdvisoriesGHSA-r9p3-38m2-qxq8 No score

A race condition is present in the crash generation server used to generate data for the crash...

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Record
GHSA-r9p3-38m2-qxq8
Weakness
CWE-362
Updated
2026-11-02
OSVALPINE-CVE-2019-9818 8.3

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Record
ALPINE-CVE-2019-9818
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-03
OSVUBUNTU-CVE-2019-9818 8.3

A race condition is present in the crash generation server used to generate data for the crash reporter. This issue can lead to a use-after-free in the main process, resulting in a potentially exploitable crash and a sandbox escape. Note: this vulnerability only affects Windows. Other operating systems are unaffected.. This vulnerability affects Thunderbird < 60.7, Firefox < 67, and Firefox ESR < 60.7.

Record
UBUNTU-CVE-2019-9818
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
Show 10 moreShow less
OSVMGASA-2019-0190 No score

Updated thunderbird packages fix security vulnerabilities

Updated thunderbird packages fixes bugs and security vulnerabilities:

Cross-origin theft of images with ImageBitmapRenderingContext. (CVE-2018-18511)

Out-of-bounds read in Skia. (CVE-2019-5798)

Use-after-free in png_image_free of libpng library. (CVE-2019-7317)

Cross-origin theft of images with createImageBitmap. (CVE-2019-9797)

Memory safety bugs fixed in Thunderbird 60.7. (CVE-2019-9800)

Type confusion with object groups and UnboxedObjects. (CVE-2019-9816)

Stealing of cross-domain images using canvas. (CVE-2019-9817)

Use-after-free in crash generation server. (CVE-2019-9818)

Compartment mismatch with fetch API. (CVE-2019-9819)

Use-after-free of ChromeEventHandler by DocShell. (CVE-2019-9820)

Use-after-free in XMLHttpRequest. (CVE-2019-11691)

Use-after-free removing listeners in the event listener manager. (CVE-2019-11692)

Buffer overflow in WebGL bufferdata on Linux. (CVE-2019-11693)

Theft of user history data through drag and drop of hyperlinks to and from bookmarks. (CVE-2019-11698)

Inline-PGP messages that allows an attacker to have Enigmail display a correctly signed or encrypted message info, but display a different unauthenticated text.

Record
MGASA-2019-0190
Updated
2026-11-02
OSVMGASA-2019-0191 No score

Updated firefox packages fix security vulnerabilities

Updated firefox packages fix security vulnerabilities.

Cross-origin theft of images with ImageBitmapRenderingContext. (CVE-2018-18511)

Out-of-bounds read in Skia. (CVE-2019-5798)

Use-after-free in png_image_free of libpng library. (CVE-2019-7317)

Cross-origin theft of images with createImageBitmap. (CVE-2019-9797)

Memory safety bugs fixed in Firefox 67, Firefox ESR 60.7, and firefox 60.7. (CVE-2019-9800)

Type confusion with object groups and UnboxedObjects. (CVE-2019-9816)

Stealing of cross-domain images using canvas. (CVE-2019-9817)

Use-after-free in crash generation server. (CVE-2019-9818)

Compartment mismatch with fetch API. (CVE-2019-9819)

Use-after-free of ChromeEventHandler by DocShell. (CVE-2019-9820)

Use-after-free in XMLHttpRequest. (CVE-2019-11691)

Use-after-free removing listeners in the event listener manager. (CVE-2019-11692)

Buffer overflow in WebGL bufferdata on Linux. (CVE-2019-11693)

Theft of user history data through drag and drop of hyperlinks to and from bookmarks. (CVE-2019-11698)

Record
MGASA-2019-0191
Updated
2026-11-02
OSVopenSUSE-SU-2019:1534-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to 60.7.0esr (boo#1135824 MFSA 2019-14):

  • CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-5798: Out-of-bounds read in Skia
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9797: Cross-origin theft of images with createImageBitmap
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: (Windows only) Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
  • CVE-2019-9821: Use-after-free in AssertWorkerThread
Record
openSUSE-SU-2019:1534-1
Updated
2026-11-02
OSVopenSUSE-SU-2019:1664-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird was updated to 60.7.2 / MFSA 2019-20 (boo#1138872):

  • CVE-2019-11707: Type confusion in Array.pop
  • CVE-2019-11708: sandbox escape using Prompt:Open

Mozilla Thunderbird was updated to 60.7.1 / MFSA 2019-17 (boo#1137595):

  • CVE-2019-11703: Heap buffer overflow in icalparser.c
  • CVE-2019-11704: Heap buffer overflow in icalvalue.c
  • CVE-2019-11705: Stack buffer overflow in icalrecur.c
  • CVE-2019-11706: Type confusion in icalproperty.c

Also fixed: No prompt for smartcard PIN when S/MIME signing is used

Mozilla Thunderbird was updated to 60.7.0 / MFSA 2019-15 (boo#1135824):

  • Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut

  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS

  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects

  • CVE-2019-9817: Stealing of cross-domain images using canvas

  • CVE-2019-9818 (Windows only): Use-after-free in crash generation server

  • CVE-2019-9819: Compartment mismatch with fetch API

  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

  • CVE-2019-11691: Use-after-free in XMLHttpRequest

  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager

  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux

  • CVE-2019-7317: Use-after-free in png_image_free of libpng library

  • CVE-2019-9797: Cross-origin theft of images with createImageBitmap

  • CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext

  • CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox

  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks

  • CVE-2019-5798: Out-of-bounds read in Skia

  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7

  • Disable building with LTO (boo#1133267).
Record
openSUSE-SU-2019:1664-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10600-1 No score

MozillaFirefox-92.0-1.2 on GA media

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10600-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score

MozillaThunderbird-91.1.1-1.1 on GA media

These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10601-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14572-1 No score

firefox-esr-128.5.1-1.1 on GA media

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14572-1
Updated
2026-11-02
OSVSUSE-SU-2019:1388-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed:

  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

Non-security issues fixed:

  • Font and date adjustments to accommodate the new Reiwa era in Japan
  • Update to Firefox ESR 60.7 (bsc#1135824)
Record
SUSE-SU-2019:1388-1
Updated
2026-11-02
OSVSUSE-SU-2019:1405-1 No score

Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues:

Security issues fixed:

  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-11694: Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell

Non-security issues fixed:

  • Font and date adjustments to accommodate the new Reiwa era in Japan
  • Update to Firefox ESR 60.7 (bsc#1135824)
Record
SUSE-SU-2019:1405-1
Updated
2026-11-02
OSVSUSE-SU-2019:1458-1 No score

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues:

Mozilla Thunderbird was updated to 60.7.0.

  • Attachment pane of Write window no longer focussed when attaching files using a keyboard shortcut

These security issues were fixed (MFSA 2019-15 bsc#1135824):

  • CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
  • CVE-2019-9816: Type confusion with object groups and UnboxedObjects
  • CVE-2019-9817: Stealing of cross-domain images using canvas
  • CVE-2019-9818: Use-after-free in crash generation server
  • CVE-2019-9819: Compartment mismatch with fetch API
  • CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
  • CVE-2019-11691: Use-after-free in XMLHttpRequest
  • CVE-2019-11692: Use-after-free removing listeners in the event listener manager
  • CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
  • CVE-2019-7317: Use-after-free in png_image_free of libpng library
  • CVE-2019-9797: Cross-origin theft of images with createImageBitmap
  • CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
  • CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
  • CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
  • CVE-2019-5798: Out-of-bounds read in Skia
  • CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
Record
SUSE-SU-2019:1458-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.10
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.11
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.12
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.13
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.14
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.15
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.16
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.17
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.18
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.19
 before 60.7.0-r0
60.7.0-r0
Show 37 moreShow less
Affected packages
PackageAffectedFixed
firefox-esr
Alpine:v3.20
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.21
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.22
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.23
 before 60.7.0-r0
60.7.0-r0
firefox-esr
Alpine:v3.9
 before 60.7.0-r0
60.7.0-r0
thunderbird
Mageia:6
From an advisory covering 14 CVEs
 before 60.7.0-1.mga6
60.7.0-1.mga6
thunderbird-l10n
Mageia:6
From an advisory covering 14 CVEs
 before 60.7.0-1.mga6
60.7.0-1.mga6
firefox
Mageia:6
From an advisory covering 14 CVEs
 before 60.7.0-1.mga6
60.7.0-1.mga6
firefox-l10n
Mageia:6
From an advisory covering 14 CVEs
 before 60.7.0-1.mga6
60.7.0-1.mga6
MozillaFirefox
SUSE:OpenStack Cloud 7
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP3
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP3
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12-LTSS
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP3
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Enterprise Storage 4
From an advisory covering 13 CVEs
 before 60.7.0-109.72.1
60.7.0-109.72.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15
From an advisory covering 13 CVEs
 before 60.7.0-3.40.6
60.7.0-3.40.6
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP1
From an advisory covering 13 CVEs
 before 60.7.0-3.40.6
60.7.0-3.40.6
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15
From an advisory covering 16 CVEs
 before 60.7.0-3.33.2
60.7.0-3.33.2
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP1
From an advisory covering 16 CVEs
 before 60.7.0-3.33.2
60.7.0-3.33.2
mozjs52
Ubuntu:18.04:LTS
 All versions, plus listed versions
52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1
 None known
mozjs38
Ubuntu:18.04:LTS
 All versions, plus listed versions
38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4
 None known
mozjs52
Ubuntu:20.04:LTS
 All versions, plus listed versions
52.9.1-1build152.9.1-1ubuntu3
 None known
MozillaFirefox
openSUSE:Leap 15.0
From an advisory covering 17 CVEs
 before 60.7.0-lp150.3.54.5
60.7.0-lp150.3.54.5
MozillaThunderbird
SUSE:Package Hub 12
From an advisory covering 22 CVEs
 before 60.7.2-85.1
60.7.2-85.1
MozillaFirefox
openSUSE:Tumbleweed
From an advisory covering 661 CVEs
 before 92.0-1.2
92.0-1.2
MozillaThunderbird
openSUSE:Tumbleweed
From an advisory covering 394 CVEs
 before 91.1.1-1.1
91.1.1-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-9818 is a high vulnerability (CVSS 8.3) in Mozilla Firefox, published May 31, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.95%, the 61st percentile. Fixed in firefox-esr 60.7.0-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 1,779 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open