Mozilla · Firefox · CVE-2020-12419
**Name of the Vulnerable Software and Affected Versions**
Firefox versions prior to 78
Firefox ESR versions prior to 68.10
Thunderbird versions prior to 68.10.0
**Description**
The issue is related to a use-after-free condition that occurs when processing callbacks during window flushing in the parent process, potentially leading to memory corruption and a crash. This could allow a remote attacker to access confidential data, compromise data integrity, or cause a denial of service.
**Recommendations**
For Firefox versions prior to 78, update to version 78 or later.
For Firefox ESR versions prior to 68.10, update to version 68.10 or later.
For Thunderbird versions prior to 68.10.0, update to version 68.10.0 or later.