Mozilla · Firefox · CVE-2019-11754
**Name of the Vulnerable Software and Affected Versions**
Firefox versions prior to 69.0.1
**Description**
The issue arises when the pointer lock is enabled by a website through the `requestPointerLock()` function without notifying the user. This could allow a malicious website to hijack the mouse pointer, potentially confusing users. The problem is due to insufficient input validation in the `requestPointerLock()` function, which may allow a remote attacker to impact data integrity.
**Recommendations**
For versions prior to 69.0.1, update to version 69.0.1 or later to resolve the issue.