CVE-2019-17021

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 68.4 Firefox versions prior to 72

Description A race condition occurs during the initialization of a new content process, potentially allowing a content process to disclose heap addresses from the parent process. This issue is specific to Windows and does not affect other operating systems. The vulnerability is related to synchronization errors when using shared resources, which could allow a remote attacker to disclose protected information.

Recommendations For Firefox ESR versions prior to 68.4, update to version 68.4 or later. For Firefox versions prior to 72, update to version 72 or later.