CVE-2019-25136

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 70

Description The issue is related to a compromised child process that could inject XBL Bindings into privileged CSS rules, leading to arbitrary code execution and a sandbox escape. It is also described as a vulnerability in the web browser related to insufficient neutralization of special elements in a request, which could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service.

Recommendations For versions prior to 70, update to version 70 or later to resolve the issue.