CVE-2019-9815

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 67 Firefox ESR versions prior to 60.7 Thunderbird versions prior to 60.7

Description A timing attack vulnerability exists, similar to previous Spectre attacks, if hyperthreading is not disabled. This issue can be mitigated by disabling hyperthreading in applications running untrusted code. Apple has introduced an option to disable hyperthreading in macOS 10.14.5. Firefox has been updated to utilize this option on the main thread and any worker threads.

Recommendations For Firefox versions prior to 67, update to version 67 or later. For Firefox ESR versions prior to 60.7, update to version 60.7 or later. For Thunderbird versions prior to 60.7, update to version 60.7 or later.