| Package | Affected versions | Patched versions |
|---|---|---|
| firefox | < 68.0 | 68.0 |
| firefox esr | < 60.8 | 60.8 |
| thunderbird | < 60.8 | 60.8 |
| suse package hub for suse linux enterprise | = 12 |
As part of a winning Pwn2Own entry, a researcher demonstrated a sandbox escape by installing a malicious language pack and then opening a browser feature that used the compromised translation. This vulnerability affects Firefox ESR < 60.8, Firefox < 68, and Thunderbird < 60.8.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free