https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:14:02.762345+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-9812 CVE-2019-9812 2026-10-05T20:14:02.778378+00:00

Affected: Mozilla Firefox ESR, Mozilla Firefox

Given a compromised sandboxed content process due to a separate vulnerability, it is possible to escape that sandbox by loading accounts.firefox.com in that process and forcing a log-in to a malicious Firefox Sync account. Preference settings that disable the sandbox are then synchronized to the local machine and the compromised browser would restart without the sandbox if a crash is triggered. This vulnerability affects Firefox ESR < 60.9, Firefox ESR < 68.1, and Firefox < 69.