CVE-2019-17015
During the initialization of a new content process, a pointer offset can be manipulated leading...
8.8 High
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
1.81%Down 11.8 points since Apr 14, 2021
What each source reports
NVD Score used
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
- Record
CVE-2019-17015- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-787
- Updated
- 2026-11-02
CVE List No score
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
- Record
CVE-2019-17015- Updated
- 2026-11-02
EUVDEUVD-2019-7489 No score
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
- Record
EUVD-2019-7489- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6jgc-63f5-7hch No score
During the initialization of a new content process, a pointer offset can be manipulated leading...
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
- Record
GHSA-6jgc-63f5-7hch- Updated
- 2026-11-02
OSVUBUNTU-CVE-2019-17015
During the initialization of a new content process, a pointer offset can be manipulated leading to memory corruption and a potentially exploitable crash in the parent process. Note: this issue only occurs on Windows. Other operating systems are unaffected.. This vulnerability affects Firefox ESR < 68.4 and Firefox < 72.
- Record
UBUNTU-CVE-2019-17015- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2020:0060-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
- Firefox Extended Support Release 68.4.1 ESR
- Fixed: Security fix MFSA 2020-03 (bsc#1160498)
- CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement
- Firefox Extended Support Release 68.4.0 ESR
- Fixed: Various security fixes MFSA 2020-02 (bsc#1160305)
- CVE-2019-17015 (bmo#1599005) Memory corruption in parent process during new content process initialization on Windows
- CVE-2019-17016 (bmo#1599181) Bypass of @namespace CSS sanitization during pasting
- CVE-2019-17017 (bmo#1603055) Type Confusion in XPCVariant.cpp
- CVE-2019-17021 (bmo#1599008) Heap address disclosure in parent process during content process initialization on Windows
- CVE-2019-17022 (bmo#1602843) CSS sanitization does not escape HTML tags
- CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826) Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0060-1- Updated
- 2026-11-02
Show 6 moreShow less
OSVopenSUSE-SU-2020:0094-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird to version 68.4.1 fixes the following issues:
Security issues fixed:
- CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement
- CVE-2019-17016: Bypass of @namespace CSS sanitization during pasting
- CVE-2019-17017: Type Confusion in XPCVariant.cpp
- CVE-2019-17022: CSS sanitization does not escape HTML tags
- CVE-2019-17024: multiple Memory safety bugs fixed
Non-security issues fixed:
- Various improvements when setting up an account for a Microsoft Exchange server. For example better detection for Office 365 accounts.
This update was imported from the SUSE:SLE-15:Update update project.
- Record
openSUSE-SU-2020:0094-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10601-1 No score
MozillaThunderbird-91.1.1-1.1 on GA media
These are all security issues fixed in the MozillaThunderbird-91.1.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10601-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0068-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
-
Firefox Extended Support Release 68.4.1 ESR
- Fixed: Security fix MFSA 2020-03 (bsc#1160498)
- CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement
-
Firefox Extended Support Release 68.4.0 ESR
- Fixed: Various security fixes MFSA 2020-02 (bsc#1160305)
- CVE-2019-17015 (bmo#1599005) Memory corruption in parent process during new content process initialization on Windows
- CVE-2019-17016 (bmo#1599181) Bypass of @namespace CSS sanitization during pasting
- CVE-2019-17017 (bmo#1603055) Type Confusion in XPCVariant.cpp
- CVE-2019-17021 (bmo#1599008) Heap address disclosure in parent process during content process initialization on Windows
- CVE-2019-17022 (bmo#1602843) CSS sanitization does not escape HTML tags
- CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826) Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Record
SUSE-SU-2020:0068-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0078-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
- Firefox Extended Support Release 68.4.1 ESR
- Fixed: Security fix MFSA 2020-03 (bsc#1160498)
- CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement
- Firefox Extended Support Release 68.4.0 ESR
- Fixed: Various security fixes MFSA 2020-02 (bsc#1160305)
- CVE-2019-17015 (bmo#1599005) Memory corruption in parent process during new content process initialization on Windows
- CVE-2019-17016 (bmo#1599181) Bypass of @namespace CSS sanitization during pasting
- CVE-2019-17017 (bmo#1603055) Type Confusion in XPCVariant.cpp
- CVE-2019-17021 (bmo#1599008) Heap address disclosure in parent process during content process initialization on Windows
- CVE-2019-17022 (bmo#1602843) CSS sanitization does not escape HTML tags
- CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826) Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Record
SUSE-SU-2020:0078-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:0142-1 No score
Security update for MozillaThunderbird
This update for MozillaThunderbird to version 68.4.1 fixes the following issues:
Security issues fixed:
- CVE-2019-17026: IonMonkey type confusion with StoreElementHole and FallibleStoreElement
- CVE-2019-17016: Bypass of @namespace CSS sanitization during pasting
- CVE-2019-17017: Type Confusion in XPCVariant.cpp
- CVE-2019-17022: CSS sanitization does not escape HTML tags
- CVE-2019-17024: multiple Memory safety bugs fixed
Non-security issues fixed:
- Various improvements when setting up an account for a Microsoft Exchange server. For example better detection for Office 365 accounts.
- Record
SUSE-SU-2020:0142-1- Updated
- 2026-11-02
OSVSUSE-SU-2020:14268-1 No score
Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues:
-
Firefox Extended Support Release 68.4.1 ESR
- Fixed: Security fix MFSA 2020-03 (bsc#1160498)
- CVE-2019-17026 (bmo#1607443) IonMonkey type confusion with StoreElementHole and FallibleStoreElement
-
Firefox Extended Support Release 68.4.0 ESR
- Fixed: Various security fixes MFSA 2020-02 (bsc#1160305)
- CVE-2019-17015 (bmo#1599005) Memory corruption in parent process during new content process initialization on Windows
- CVE-2019-17016 (bmo#1599181) Bypass of @namespace CSS sanitization during pasting
- CVE-2019-17017 (bmo#1603055) Type Confusion in XPCVariant.cpp
- CVE-2019-17021 (bmo#1599008) Heap address disclosure in parent process during content process initialization on Windows
- CVE-2019-17022 (bmo#1602843) CSS sanitization does not escape HTML tags
- CVE-2019-17024 (bmo#1507180, bmo#1595470, bmo#1598605, bmo#1601826) Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4
- Record
SUSE-SU-2020:14268-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxSUSE:HPE Helion OpenStack 8 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:OpenStack Cloud 7 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:OpenStack Cloud 8 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:OpenStack Cloud Crowbar 8 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Desktop 12 SP4 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP1 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP2 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP3 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 12 SP4 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Software Development Kit 12 SP5 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
Show 21 moreShow less
| Package | Affected | Fixed |
|---|---|---|
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP1-LTSS From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP2-LTSS From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP2-BCL From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP3-LTSS From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP4 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Enterprise Storage 5 From an advisory covering 7 CVEs |
before 68.4.1-109.101.1 | 68.4.1-109.101.1 |
MozillaFirefoxSUSE:Linux Enterprise Module for Desktop Applications 15 From an advisory covering 7 CVEs |
before 68.4.1-3.66.1 | 68.4.1-3.66.1 |
MozillaFirefoxSUSE:Linux Enterprise Module for Desktop Applications 15 SP1 From an advisory covering 7 CVEs |
before 68.4.1-3.66.1 | 68.4.1-3.66.1 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 From an advisory covering 7 CVEs |
before 68.4.1-3.66.1 | 68.4.1-3.66.1 |
MozillaThunderbirdSUSE:Linux Enterprise Workstation Extension 15 SP1 From an advisory covering 7 CVEs |
before 68.4.1-3.66.1 | 68.4.1-3.66.1 |
MozillaFirefoxSUSE:Linux Enterprise Server 11 SP4-LTSS From an advisory covering 7 CVEs |
before 68.4.1-78.57.1 | 68.4.1-78.57.1 |
mozjs52Ubuntu:18.04:LTS |
All versions, plus listed versions 52.3.1-0ubuntu352.3.1-7fakesync152.8.1-0ubuntu0.18.04.152.9.1-0ubuntu0.18.04.1 |
None known |
mozjs38Ubuntu:18.04:LTS |
All versions, plus listed versions 38.8.0~repack1-0ubuntu138.8.0~repack1-0ubuntu338.8.0~repack1-0ubuntu4 |
None known |
mozjs52Ubuntu:20.04:LTS |
All versions, plus listed versions 52.9.1-1build152.9.1-1ubuntu3 |
None known |
MozillaFirefoxopenSUSE:Leap 15.1 From an advisory covering 7 CVEs |
before 68.4.1-lp151.2.24.1 | 68.4.1-lp151.2.24.1 |
MozillaThunderbirdopenSUSE:Leap 15.1 From an advisory covering 7 CVEs |
before 68.4.1-lp151.2.22.2 | 68.4.1-lp151.2.22.2 |
MozillaThunderbirdopenSUSE:Tumbleweed From an advisory covering 394 CVEs |
before 91.1.1-1.1 | 91.1.1-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2019-17015 is a high vulnerability (CVSS 8.8) in Mozilla Firefox, published January 8, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.81%, the 78th percentile. No source names a fixed version.
References
bugzilla.mozilla.org/show_bug.cgi?id=1599005
mozilla.org/security/advisories/mfsa2020-01
seclists.org/bugtraq/2020/Jan/18
packetstormsecurity.com/files/155912/Slackware-Security-Advisory-mozilla-thunderbird-Updates.html
lists.opensuse.org/opensuse-security-announce/2020-01/msg00029.html
Show 194 moreShow less
nvd.nist.gov/vuln/detail/CVE-2019-17015
github.com/advisories/GHSA-6jgc-63f5-7hch
suse.com/support/update/announcement/2020/suse-su-20200068-1
bugzilla.suse.com/1160305
ubuntu.com/security/CVE-2019-17015
cve.org/CVERecord?id=CVE-2019-17015
This page doesn't list everything
Left out here: 216 references. The JSON record has them.